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Company has floated 
project trial balloons 
on site for 10 years 

BY ALEX HANDY 

It's been 10 years since IBM 
launched its alphaWorks project, 
an unprecedented initiative to 
foster collaboration among the 
company's far-flung technology 
researchers. But alphaWorks, 
from the beginning, went far 
beyond closed-door teamwork 
among IBM's developers. It also 
encompassed customers, pro- 
viding them with early insight 
into new projects, as well as 
access to sample code, binaries 
and documents. 

In all that time, the site has 

hosted more than 700 projects 

continued on page 28 ► 



Mercury Strengthens 
SOA Test Capability 



BY ALEX HANDY 

Mercury Interactive, set to be 
acquired by Hewlett-Packard, is 
expanding its SOA testing capa- 
bilities — even while concerns 




SOA tools extend the company's 
testing reach, says Mercury's Rende. 



about the acquisition are inspir- 
ing competitors. 

Earlier this month, Mercury 
added two new tools to help 
testers poke holes in service-ori- 
ented- architecture deployments. 
At the same time, the company 
announced the release of Systinet 
2.1, the newest revision of the reg- 
istry Mercury acquired in January. 

But while Mercury's updates 
seem to indicate business as usu- 
al, the competition claims to be 
scooping up customers worried 
about the future of the Mercury 
product line under HP, which 
has not had success selling devel- 
oper software tools in the past. 

Jonathan Rende, Mercury's 
vice president of products, said 
that the new SOA testing tools, 
Mercury Service Test and Mer- 
cury Service Test Management, 



fall in line with existing testing 
products, and integrate easily 
with already deployed Mercury 
testing tools. 

"Service Test Management 
integrates with Systinet and pulls 
down all the services to create 
requirements and test plans 
automatically," said Rende. 
"Mercury Service Test creates, 
automatically, from the WSDL 
information, tests to test these 
reusable services. Functional 
aspects of all those assets can be 
reused in LoadRunner or Perfor- 
mance Center." 

Meanwhile, other test tools 
providers smell blood in the 
water, said Scott Hebner, vice 
president of marketing and strate- 
gy at IBM Rational Software. 
When asked if IBM Rational was 
continued on page 26 ► 



Taking the Rational Out of RUP 

Two unified processes, OpenUPand EssUP, streamline practices 
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BY JENNIFER DEJONG 

Once tied to the Rational tool 
set, the Unified Process is mov- 
ing well beyond its roots. 

The Eclipse Process Frame- 
work (EPF) project last month 
delivered Composer, a tool 
designed to work with OpenUP, 
an emerging set of best practices 
for software development that the 
EPF project began publishing 
earlier this year. And at the 
Microsoft Tech-Ed conference in 
Barcelona Nov. 7-10, Ivar Jacob- 



son International is expected to 
preview a Visual Studio Team 
System implementation of Essen- 
tial Unified Process (EssUP), the 
consulting firm's set of software 
development practices. 

Both EssUp and OpenUP 
have their roots in the Rational 
Unified Process (RUP), a set of 
software development best prac- 
tices tied to IBM Rational tools. 
The EPF project is led by Per 
Kroll, IBM's development man- 
ager for RUP, and the technology 



behind Composer was con- 
tributed by IBM. EssUP was 
developed by former Rational 
executive Ivar Jacobson, co-cre- 
ator with Grady Booch and 
James Rumbaugh of the Unified 
Modeling Language. 

Rational roots aside, OpenUP 
and EssUP are not simply vari- 
ants of RUP, said Kroll and 
Jacobson, respectively. Both sets 
of best practices have been writ- 
ten from the ground up, and they 
continued on page 27 ► 
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EPF Composer is used to create processes with advice from OpenUP. 
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Software as a Service Reaches a New Apex 

Salesforce.com expands AppExchange with Java-like language for developers 



BY ALEX HANDY 

Somewhere between Java and 
AJAX lies Apex, Salesforce 
.corn's new programming lan- 
guage for constructing on- 
demand applications inside of its 
popular AppExchange system. 
Developers looking to build 
and market software-as-a-service 
applications should be able to 
begin building them in Apex 
on the AppExchange Web- 
based development environ- 
ment sometime in early 2007. 

The Apex language is just a 
part of Salesforce.com's move 
to become the eBay of software 
as a service, said Marc Benioff, 
CEO of Salesforce.com. His 
company will spend much of 
2007 introducing new services 
for hopeful SaaS vendors, 
including development sup- 
port, venture capital solicita- 
tion, and even the option for 
developers to rent a cubicle in 
Salesforce.com headquarters 
for US$20,000 per year. 

But all of these improve- 
ments, said Benioff, will roll out 
in 2007. The Apex language, 
which is based on and aestheti- 
cally resembles Java, will be 
available for AppExchange 
developers in the early part of 
the year, while the surrounding 
environment and supporting 
APIs for external integration will 
begin to appear later in the year. 

The Salesforce.com Apex 
platform will be inherently multi- 
tenant, meaning it includes facil- 
ities to ease the process of host- 
ing application information 
within shared back-end databas- 
es. This requires extensive secu- 
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rity and access controls, said 
Benioff. He added that the 
platform has been designed 
with this in mind. The Apex 
language can be used to 
build applications from 
scratch and then expose 
them externally as Web ser- 
vices with WSDL. 

On the other side of the 
coin, the language can be 
used to supplement exist- 
ing Salesforce.com applica- 
tions and to customize their 
functionality. 

Rob Bois, research 
director at AMR Research, 
sees the Salesforce.com 
Apex platform as a way for 
enterprises to escape the 
upgrade cycle. That, he 
said, means customized 
applications can be as com- 
plex as needed without 
instilling fear in the corpo- 
rate change management 
committee. "Our enterprise 
customers try to keep their 
deployments as vanilla as possi- 
ble because they've learned 
over time how difficult it is to 
take upgrades. To me the big 
revolution is they can make 
those customizations if they're 
Salesforce.com customers and 
continue to take upgrades." 

While this is a compelling 
benefit of the platform, said 
Bois, there is one thing that 
holds AppExchange back: com- 
plexity of the marketplace. 

"If you're a director of IT, 
you don't want people adding 
on all these services willy-nilly. 
Now you have all these crazy 
per-user per-month fees to deal 
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Salesforce.com's new Apex programming language will be used to supplement the 
functionality of applications. 



with. They need to ratchet that 
down. I don't see people build- 
ing out a complete enterprise 
portfolio based on 30 different 
applications they pull off of the 
AppExchange," said Bois. 

Rebecca Wettemann, ana- 
lyst at Nucleus Research, said 
that AppExchange may be 
large and somewhat unwieldy, 
but that there really isn't a basis 
for comparison elsewhere in 



the enterprise software world. 
"I don't know of a place where 
I can go and see what all of 
Oracle's or Microsoft's partners 
deliver. As people do more 
development, AppExchange 
may need a more registry 
approach." 

Wettemann said Apex shows 
enterprise developers the poten- 
tial for new integrations between 
internal and external services. 



"I think one of the chal- 
lenges customers have had 
before is being able to inte- 
grate [with Salesforce.com 
applications] as easily as 
they'd like to," said Wette- 
mann. She added that her 
customers are already 
intrigued by the possibility 
of extending integrations 
with Apex. 

But for the immediate 
future, Bois and Wette- 
mann both said that 
t AppExchange isn't likely to 
see much earnest competi- 
tion, despite promised 
offerings from Web Ex and 
other SaaS providers. "I 
think the reason Sales- 
force. com has been suc- 
cessful in the AppExchange 
is the fact that they have the 
critical mass already for on- 
demand users. That gives 
them that critical mass to 
be able to attract the audience to 
a broader platform. It's difficult 
for a company like an HP or an 
IBM or a BE A to come out and 
create a SaaS platform because 
they don't already have that cap- 
tive audience," said Bois. "I 
could see Microsoft moving 
here. They have that captive 
audience to begin with, and they 
certainly have the developer 
community." I 
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Apex is designed to ease the addition of maps, external data streams and 
internal information systems to existing AppExchange applications. 



WebEx Looks to Make a Connection 

Set to launch collaborative app development platform 



BY ALEX HANDY 

Collaboration is the loudest 
buzzword heard in the Valley 
this October. WebEx joined the 
chorus by surfacing plans for an 
online application development 
ecosystem. WebEx Connect 
should launch on Nov. 30, and 
will focus on the creation of col- 
laborative tools. While repre- 
sentatives deny that WebEx 
Connect is modeled after Sales- 
force.com's AppExchange, the 
service has much in common 
with that successful software-as- 
a-service (SaaS) marketplace. 

David Knight, vice president 
of WebEx Connect, pointed out 
a number of buzzwords the new 
platform will support — collabo- 
rative, wiki-like, AJAX-enabled 
online workspaces are at the 
heart of WebEx Connect. "It is 



designed to enable WebEx's 
customers and partners to build 
what we call composite collabo- 
rative applications. We think of 
them as business process mash- 
ups," said Knight. 

Those mash-ups can be com- 
bined with the existing WebEx 
meeting and presentation tools 
to foster a new flavor of mash- 
up: the collaborative mash-up. 
At present, mash-ups in collabo- 
rative environments aren't as 
common as they are likely to 
become over the next year, said 
Knight. Knight said that build- 
ing collaborative work environ- 
ments from disparate informa- 
tion sources, such as Google 
Maps, stock exchanges or inter- 
nal spreadsheets, can boost 
informational awareness for 
teams that would regularly use a 



conference call or Web meeting 
system to communicate. 

Companies seeking to sell 
their composite collaborative 
WebEx Connect applications 
will also be offered a market- 
place from which to sell their 
wares. The details of just how 
this marketplace will evolve are 
still not clear, but Knight intimat- 
ed that Salesforce.com's AppEx- 
change is a successful example of 
an SaaS marketplace. 

Knight said that the WebEx 
Connect design and construc- 
tion platform will offer develop- 
ers a drag-and-drop method to 
create applications, and that an 
underlying scripting language 
will also be available for more 
direct control. JavaScript will 
also be usable within these 
applications. I 



NEWS 



Software Development Times . November 1, 2006 . 



www.sdtimes.com 



Cache 2007: Nothing if Not Persistent 

Database eliminates 0/R mapping, enables RAD Web application development 



BY DAVID RUBINSTEIN 

Map no more. 

That's the message from 
Inter Systems, which is expected 
to announce on Nov. 6 an update 
to its Cache 2007 database with a 
component that eliminates the 
need for object-relational map- 
ping in Java applications, as well 
as with an AJAX-based frame- 
work for the rapid development 
of Web applications. 

The component, called 
Jalapeno (for Java Language 
Persistence with No mapping), 
is an object manager that allows 
Java developers to define Plain 
Old Java Classes and mark them 
as persistent using the Schema 
Builder utility provided; then 
Cache automatically creates 
database representations for 
those classes without mapping, 
according to InterSystems vice 
president for strategic planning 
Paul Grabscheid. 

"Java developers live in a 
Java object world, but must 
work with relational databases. 
Most people use automatic 
object-relational mapping such 



as Hibernate, or EJBs, but 
that's still not effective," Grab- 
scheid said. "Our aim was to 
eliminate that [mapping] step." 

Persisting Java objects both 
reduces development time, 
because creating mappings to 
relational databases is no longer 
required, and improves perfor- 
mance, because the objects 
don't have to be broken down 
or reassembled each time they 
are stored or retrieved, accord- 
ing to an InterSystems white 
paper on the topic. 

Cache is built upon a Unified 
Data Architecture that also 
allows data to be exposed as rela- 
tional tables when necessary, 
Grabscheid said. He noted that 
Jalapeno can store data in 
any JDBC-compliant database, 
although the solution is opti- 
mized for Cache. The database 
connection can be shared by 
both Jalapeno's object persis- 
tence methods and SQL queries, 
without the need for mapping. 

Dana Gardner, principal 
analyst at Gilford, N.H. -based 
research company Interarbor 



Solutions, said of Jalapeno: "I'm 
not sure it'll change the industry 
per se, but it extends [InterSys- 
tems'] value in existing 
accounts. [Cache 2007] auto- 
mates some previously tedious 
steps and does it for two differ- 
ent classes of developer" — Java 
and Web developers. A compet- 
ing company, Versant, sells an 
object-oriented database that 
eliminates mapping to relational 



tables, but it does not have the 
RAD development component. 
The development frame- 
work, called Zen, is injected as 
a layer between the relational 
database and the application 
that requires the data, and is 
accessible by scripting tools. 
"They can create views of the 
data in XML, JavaScript and 
AJAX without having to do the 
heavy lifting in Java develop- 



ment," Gardner said. 

The Cache solution involves 
describing Web pages through 
XML, which is compiled for 
high performance when the 
page is called at runtime, Grab- 
scheid said. Dozens of prebuilt 
components can be inherited so 
that a certain look-and-feel can 
be carried over from page to 
page. Security is provided via 
tags that specify access control. I 



NETWORKING PIONEER NOORDA DIES AT 82 

"Father of network computing" and venture capitalist Ray Noor- 
da died Oct. 9 at his home in Orem, Utah, at the age of 82. A 21- 
year veteran of General Electric, he had spent 12 years as a man- 
agement consultant when he came across troubled start-up 
Novell Data Systems in 1982. Thirteen years later, when he 
retired as CEO, the company's headcount had grown 700-fold, 
from the teens to the thousands, and Novell NetWare had 
become the dominant force in LAN technology. 

Noorda founded the Canopy Group (now Canopy Ventures) 
after leaving Novell in 1995; the company has invested in more 
than 100 companies, primarily in Utah. In a statement on 
Canopy's Web site, Utah Governor Jon M. Huntsman Jr. noted, 
"He launched what would become Utah's technology sector." 

—P.J. Connolly 




Java EE 5 Simply Too Complex, Analyst Says 

1990s approach to programming makes platform no longer viable 



BY ALEX HANDY 

When Sun Microsystems trotted 
out Java Enterprise Edition 5 at 
JavaOne this past summer, the 
company heralded it as the sim- 
plest Java EE yet. With the addi- 
tion of Enterprise JavaBeans 3.0, 
annotations and more refined 
persistence support, Java EE 5 
was supposed to speed develop- 
ment and testing. But at the 
time, Richard Monson-Haefel, 
senior analyst at the Burton 
Group and one of the contribu- 
tors to the design of EJB 3.0, 
predicted that Java EE 5 was still 
too large and complex. Now, four 
months later, he's more sure than 
ever that Java EE 5 stacks are 
headed for the junk heap. 

Monson-Haefel was on the 
executive committee for J2EE 
1.4 and he was a founder of the 
open-source application server 
project Geronimo. He said that 
the future of Java as a whole is 
not in question, but that the 
massive framework of Java EE 
5 is still too much to handle. 

"Java Standard Edition is 



rock-solid. It's Java EE that's no 
longer a viable platform," said 
Monson-Haefel. He added that, 
while many developers use 
servlets, Java Database Connec- 
tivity and JavaServer Pages, 
these same developers are usual- 
ly at the Java EE trough for these 
features alone. "The Java EE 
specification says you have to use 
all these [APIs]. In order to be 
certified, you have to create a 
project that uses all these pieces. 
To get all those things to play 
well together, you end up with a 
really complicated programming 
model. Java EE is based on a 
late- 1990s approach to program- 
ming: It's very API-centric." 

COMPLICATING MATTERS 

Monson-Haefel said that, 
rather than simplifying things 
in Java EE 5, the JCP actually 
has complicated matters. While 
Sun touts simplicity as the most 
significant improvement to 
this version, Monson-Haefel 
said that these improvements 
actually increased the difficulty 



for developers. 

"It seems simpler on the sur- 
face, but developers have to 
learn an entirely new API: the 
persistence API, which intro- 
duces a new programming 
model," said Monson-Haefel. 
"It's not a programming model 
that substantially simplifies the 
task. If they'd added a 
WYSIWYG drag-and-drop sys- 
tem for development, that would 
be a convincing simplicity argu- 
ment. But looking at the tech 
itself, and speaking to people 
who are actually using EE, and 
using it myself, I came to the 
conclusions that this platform is 
not simpler — it's just different." 

Since Sun handed over the 
design of the Java EE platform 
to the JCP, it's not the only party 
responsible for this increased 
complexity. As a member of the 
JCP, Monson-Haefel said that he 
and all members of the JCP are 
to blame for EE 5 s current state. 
SD Times attempted to discuss 
these issues with Sun's Java EE 5 
team, but the company could not 



present the team for an inter- 
view before press time. 

NO SIMPLE ANSWERS 

Onno Kluyt, director of the JCP 
program at Sun, said that the 
complexity Monson-Haefel sees 
as a problem is not in the baili- 
wick of the JCP. Kluyt said that 
the JCP is a standards body, not 
an optimization body. Kluyt said 
that the best way to provide sim- 
plicity is in the IDE. "Many of 
the JSRs keep in mind how APIs 
can be constructed so that the 
various IDEs can hook into 
those APIs to provide wizards 
and other helpful tools," said 
Kluyt. "Simplicity is something 
each JSR keeps in mind and 
focuses on. But from a regulato- 
ry perspective, it's not clear how 
you would enforce [a push for 
simplicity]. Simplicity is in the 
eye of the beholder." 

That's an argument Monson- 
Haefel said he has heard before. 
"The vendors have been singing 
that song since EJB and Java EE 
were first introduced in 1998 



and 1999. In eight years of 
development, the tooling — with 
maybe one or two exceptions — 
really hasn't developed to the 
point where the task becomes 
simpler," said Monson-Haefel. 

"There is an enormous 
amount of configuration that has 
to take place before you deploy 
an application. I think it's obvi- 
ous that this is not about tooling 
because this hasn't been solved 
yet," added Monson-Haefel. 

So what should enterprises 
looking for an application stack 
do? Monson-Haefel said that 
there is no single solution. Since 
Java EE 5 s fundamental prob- 
lem is that it attempts to be all 
things to all people, he said, a 
single solution isn't likely to 
appear. What he did suggest is 
that only a handful of companies 
actually need all the functionality 
provided by a full Java EE stack. 

For the rest of the business 
world, said Monson-Haefel, the 
software choice should be dictat- 
ed by the problem being solved. 

"You have to look at the 
offerings and find the thing that 
fits your solution. Stop follow- 
ing the technology that's being 
handed out by the vendors and 
find a solution that will work for 
you," said Monson-Haefel. I 
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with enterprise-level data visualization for .NET, COM, IT|SQL & Java 



£ Chart FX 

for Visual Studio 2005 




The most tightly integrated data visualization 
tool available for Visual Studio 2005 provides 
smart tag and data wizards, easy to use API, a 
DHTML|AJAX rendering engine, and additional 
developer resources such as the Resoi — 
Center and Extensions Manager. 



Chart FX Gauges offers a collection of Radial and 

Linear Gauges, Digital Meters and LED Panels that 

will display real time 

data in your application. 

Provides Windows & 

WebForms components 

for both Visual Studio 

2003 and 2005. Renders 

images, Flash, SVG and 

.NET components. 
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Chart FX for .NET 6.2 
Pocket Chart FX for . 



data analysis tool for your 
Windows Forms, Web Forms 
or .NET Compact Framework 
applications featuring code 
generation tools and a web 
server component to generate 
JPEG, PNG, .NET, Flash or 




The Chart FX Extensions Pack extend the Chart FX core 
with the following specific capabilities or functionality: \^ 




Chart FX Internet 6.2 

Uses GDI+ for enhanced visual 
attributes, such as borders, 
gradients and transparency. 
Generates PNG, JPG, SVG, 
Flash, ActiveX or even a .NET 
Component. Includes the 
Designer and Resource Center. 



Chart FX Client Server 6.2 

Leveraging all of the features in 
our highly renowned Chart FX 
for .NET in a product specifically 
designed for COM desktop 
developers. 



Chart FX for Java 6.2 

A Java component that 
produces charts, maps, or 
gauges in PNG, JPEG, SVG & 
Flash formats or a native .NET 
output - something no other 
vendor can deliver. Seamlessly 
works within both NetBeans, 



Chart FX OLAP 

A .NET graphical front-end 
business intelligence solution. 
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Chart FX Maps 

Display graphical data through 
objects in geographic maps, 
diagrams or seating charts. 



Chart FX Statistical 

Applying statistical calculations 
and analysis to your data. 




Chart FX Financial 

Integrated technical analysis 
charting into financial apps. 
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Maps 
Included! 
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Chart FX 

for Reporting Services 

Enterprise quality charts and gauges for 
your SQL Server 2005 reports through the 
Properties List, Data Wizard and Smart 
Tags — and absolutely no coding. 



Product! 



Chart FX 

Developer Studio 



The Chart FX Developer Studio 2006 is a collection of non-expiring, full de\ 
visualization solutions for the COM, .NET (including Visual Studio 2005) and Java 
addresses specific functionalities including gauges, business intelligence (OLAP), 
image or geographic maps, financial and statistical calculations and studies. 
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COM • .NET • JAVA • IT|SQL CHARTING SOLUTIONS 

For more information, please contact Software FX at (561) 999-8888 or sales@softwarefx.com 



06 Software FX. All rights reserved. Chart FX is a registered trademark of Software FX, Inc. 



rands are owned by their respective 



6 



NEWS 



Software Development Times . November 1, 2006 . 



www.sdtimes.com 



Java Community in Process of Redefining Itself 



BY ALEX HANDY 

In its eight-year history, the 
Java Community Process has 
grown and adjusted itself in a 
distinctly recursive manner: 
Changes to JCP protocol are 



designed and adopted through 
the JCP process. Now, JSR 
306 — Towards a New Version 
of the JCP — is working its way 
through this process, with 
changes to the way in which 



licenses for technology compat- 
ibility kits are handled during 
the JSR development process. 

In addition, the JCP hopes 
to optimize the JSR approval 
and development process to 



speed creation and completion 
of new Java features. 

At present, JSR teams do 
not intimate the licensing mod- 
el of the final specification and 
its related implementations 
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until the process is complete. 
The JCP's next revision should 
force JSR committees to pre- 
sent licensing requirements 
along with the initial specifica- 
tion drafts. 

Onno Kluyt, director of the 
JCP program at Sun Microsys- 
tems and chair of the JCP, said 
that the JSR 306 committee is 
also looking into the role of 
individuals in the process. 

"[We'll be] looking at the 
process of joining as an individ- 
ual, and looking at how an indi- 
vidual can best contribute to 
expert groups," said Kluyt. At 
JavaOne this past summer, the 
JCP began a more aggressive 
push for attendees to become 
members of the JCP and goad- 
ed active Java developers to 
contribute their thoughts and 
time to JCP endeavors. 

This renewed emphasis on 
the individual's role in the Java 
Community Process was influ- 
enced by the way open-source 
software is created, said Kluyt. 
"The general developer expects 
most pieces of software are 
developed with openness and 
transparency," Kluyt said. "That 
approach also is used in APIs 
and in how specifications are 
defined. For the JCP to remain 
a quality standards organiza- 
tion, it has to be able to respond 
to that expectation." 

INTEROPERABILITY A GOAL 

Another expectation that has 
changed in the Java community, 
said Kluyt, is that Java work 
well with other languages. 

"Interoperability always 
played a role in Java, but since 
the emergence of Web services 
and the new buzzwords like 
SOA, enterprises more and 
more want to be able to inte- 
grate stacks of applications. In 
JSR 306, we're looking to inves- 
tigate how we can allow specifi- 
cations coming out of the JCP 
to be implemented in a non- 
Java context," said Kluyt. 

That, he elaborated, means 
laying out a method for new 
Java features to be implement- 
ed in other languages, like C + + 
or COBOL. 

Kluyt expects that this revi- 
sion to the JCP will be ready 
sometime late next year. In the 
meantime, the entire Java Com- 
munity Process will be under 
scrutiny by the JSR 306 team as 
they search for new methods of 
improving how Java is revised. I 
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JetBrains' Latest Idea: TeamCity Build System 

New solution extends flagship Intel I iJ IDEA into the nightly development process 



BY ALEX HANDY 

October was a .0 kind of month 
for JetBrains. The company 
placed IntelliJ IDEA 6.0 on 
the runway alongside a new 
build and code management 
system, dubbed TeamCity 1.0. 
The two combine their powers 
to extend unit testing and 
static code analysis into the 
daily and nightly development 
processes. 

"IntelliJ IDEA is not a rich 
client platform for everything, 
nor is it very general and 
huge. IntelliJ IDEA is just a 
focused Java IDE. That is its 
strength," said Alex Tkach- 
man, JetBrains' COO. He said 
that this focus allowed his 
team to improve such features 
as recursive language syntax 
highlighting and better static 
code completion. 

IntelliJ IDEA 6.0 costs 
US$499 for a fresh copy, or 
$299 for an upgrade. 

Tkachman said he was 
pleased with a new plug-in sys- 
tem that allows non-Java lan- 
guages to be understood by 
the IDE. Already, he said, 
developers have released new 
tools that take advantage of it. 

"One developer published 
an absolutely brilliant plug-in 
that used this API and Java 
annotations to annotate string 
fields, and methods — like con- 
taining — and return values 
from specific languages, and 
match specific regular expres- 
sions," said Tkachman. 

WINDOW INTO BUILDS 

In October, the company also 
released version 1.0 of Team- 
City, its new all-encompassing 
build solution. 

This polis is covered with a 
Web UI that gives developers 
a full window into the build 
process and the unit testing 
process. Errors and build fail- 
ures are automatically tracked 
back through the repository to 
narrow the list of suspects, 
said Tkachman. The system 
includes support for .NET 
and Java builds through 
MSBuild, Visual Studio 2005, 
Ant, Nant and Maven. For 
now, TeamCity works only 
with CVS, Perforce and Sub- 
version repositories. 

TeamCity does have some 
features that are supported 
only in IntelliJ IDEA. Primary 
among these is the ability to 



run static code analysis against 
the nightly build before it's 
compiled. 

But, said Tkachman, other 
Java IDEs will be supported in 



version 1.5. 

Behind TeamCity, the soft- 
ware can delegate builds to 
network accessible computers 
of the user's choosing. This 



functionality can be extended 
to a grid or simply to idling 
desktop PCs. 

Until Dec. 1, the company 
is offering TeamCity user 



accounts for $199, according 
to Tkachman. Those who pur- 
chase IntelliJ IDEA 6.0 before 
December will also receive 
TeamCity 1.0 for free. I 
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, COMPANIES , 



•mobi 



Palm has announced that it will phase out its Pluggedln developer pro- 
gram in favor of the Palm Developer Network (www.palm.com 
/us/developers) r a new program for hardware and software developers 
that includes elements for Palm OS as well as for Windows Mobile. Ser- 
vices available immediately are a device loaner program and the 
"Designed for Palm" software compatibility testing and certification 
program. Being launched later this year will be a multiplatform support 
knowledgebase and Palm Solutions Directory, a promotional program 
for qualified applications . . . Early September saw the formation of 
the dotMobi Advisory Group (MAG), a not-for-profit consortium with 
the purpose of ensuring that the .mobi Top Level Domain is operated 
in the interests of mobile developers and con- 
tent providers. On Sept. 26, .mobi, the first 
Jvirwr* yr&up TLD dedicated to content for mobile devices, 
began accepting general domain-name registrations. Members include 
Ericsson, Microsoft, Nokia, Samsung, T-Mobile and Vodafone . . . The 
Itanium Solutions Alliance celebrated its first anniversary last month 
by observing two milestones. The alliance announced that demand 
chain software supplier JDA Software Group had joined, pushing mem- 
bership over the century mark. At the same time, the alliance noted 
that more than 2,000 vendors had released 10,700 applications for 
the Itanium 2 platform, more than twice the number available at the 
alliance's founding last year . . . The Liberty Alliance has released the 
final version of ID-WSF 2.0, Liberty's open r-| 
Identity Web Services Framework. Among 

the key areas addressed in this release is PflO|£CT 

the ability to deal with identity transactions at all levels. A new Liber- 
ty People Service was designed to provide more privacy and security 
for social networking applications. Also, for the first time, the alliance 
is releasing the requirements and use cases that supported the devel- 
opment of ID-WSF 2.0. 



NEW PRODUCTS, 



ComponentArt has announced the immediate availability of Web.UI 
2006.2 for ASP.NET AJAX beta, which it says is the first suite of 
controls designed specifically for Microsoft's forthcoming rich Internet 
application development framework that was formerly known as Atlas. 
The tool offers deep integration into the ASP.NET AJAX framework: All 
controls inherit from the Sys.UI.Control client-side base class, imple- 
ment type descriptors and expose extensive client-side object models 
built specifically for the AJAX Library type system. It also can use 
Atlas client-side syntax to modify or even create the structure of any 
Ul control on the client, without callbacks or postbacks. 



UPDATES 



Quest Software has announced the release of an expanded freeware 
version of Toad for DB2, in conjunction with IBM's DB2 "Developer in 
a Box" freeware package, featuring the DB2 Express-C database. The 
new version includes the Toad Project Manager, a DB2 work area that 
allows users to organize project resources, and offers users a data grid 
with unlimited viewable rows. The freeware has no expiration or limi- 
tation on the number of users . . . TechTracker released Version- 
Tracker Pro 4.2 for Macintosh at the end of September. New features 
include the ability to scan Unix volumes, filtering at OS dot level (for 
example, 10.4.5 versus 10.4.8), additional control over how external 
devices are scanned, and a so-called Universal binary, supporting Intel 
as well as Power PC hardware . . . VMware has announced the avail- 
ability of updates to its product line that add full support for 64-bit 
operating systems to VMware Infrastructure 3. VMware ESX Server 
3.0.1 offers users an easier upgrade path from 
ESX Server 2.x hosts and storage, and both ESX 
Server 3.0.1 and VMware VirtualCenter 2.0.1 are now available in local- 
ized German and Japanese versions . . . Red Gate Software has 
unveiled the latest version of ANTS Profiler 2.7, a code- and memo- 
ry-profiling tool for .NET Framework languages. The new version will 
run on Windows Vista, includes interface enhancements and can cope 

continued on page 25 ► 
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Electric Cloud Takes Command 
Of App Production Process 



BY P.J. CONNOLLY 

Automated build tool maker 
Electric Cloud has announced 
plans to ship ElectricComman- 
der, a browser-based tool for 
automating the build, package, 
test and deploy processes, later 
this year. 

The company positions 
ElectricCommander as the fin- 
ishing touch on its suite of so- 
called production management 
software, joining parallel-build 
tool ElectricAccelerator and 
Electriclnsight, an add-on to 
ElectricAccelerator that brings 
detailed analysis and reporting 
on project builds. 

Electric Cloud's approach 
distinguishes the design and 
code phases from later phases. 
From this perspective, the 
company claims that 80 percent 
of the production tasks can and 
should be automated, to allow 
people to focus on project-spe- 
cific tasks such as defining test 
policies, combing the output, 
and specifying the build and 
test commands. 

ElectricCommander is meant 
to replace the brittle, home- 
grown production processes 
that many shops employ 
because they've worked so far, 
according to Electric Cloud 
CEO Mike Maciag. He argued 
that agile development meth- 
ods can't afford to wait for the 
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ElectricCommander's three-tier architecture allows for centralized data 
collection while enabling broad access to reports and status information. 



old-fashioned makeshifts. Dis- 
tributed development teams 
add to the challenge, Maciag 
observed, adding that the push 
for more complete governance 
and corporate compliance 
demands the replacement of 
manual processes, as does the 
increasing use of virtualized 
systems, whether in a grid envi- 
ronment or not. 

At the heart of an Electric- 
Commander installation is a 
multithreaded Java-based man- 
agement server, with attached 
database for storage of command 
packages, log files and metadata. 
The management server runs on 
Microsoft Windows XP and 
Windows Server 2003, and Red 



Hat Enterprise Linux. 

The server manages the 
build and test processes, allows 
tagged project assets to be 
shared and reused, and updates 
the relevant log files at each 
step in a process for transparent 
access to how a job runs. 

The procedure packages 
can be set up with time limits 
on each step, or at selected 
points. Agents on the build 
machines execute the job steps, 
monitor the status of the 
process and report the results 
back to the master server. The 
agent can run in three Unix 
environments (AIX, HP-UX 
and Solaris), as well as Red Hat 
Linux and Windows. I 



A Troux Enterprise Architecture Platform 



BY DAVID RUBINSTEIN 

Creating what it calls an 
Actional Enterprise Architec- 
ture Platform, Troux Technolo- 
gies in mid-October released 
Metis 6, an update to its soft- 
ware that provides an aggregat- 
ed view of software assets from 
modeling through to the meta- 
data repository. 

Metis 6 includes Metis 
Architect, the modeling tool, 
and Metis Server, which pro- 
vides the metadata repository, 
portal and dashboard capabili- 
ties, reporting, a workflow 
engine and a policy manager. A 
third piece, Metis Collector, has 
automatic ETL capability for 
handling the data. 

"With this information, you 
can begin to understand and 
relate the processes, people, 



skills and infrastructure" of the 
organization, said Jim Van Riper, 
vice president of planning 
and development. "That's what 
makes the platform actionable." 
One of the goals of the 
release is to get the EA data out 
of the hands of the architects and 
bring it to people around the 
enterprise who can use the data, 
Van Riper said. "If [the data] is in 
an EA silo, accessible only by 
architects, you can't take advan- 
tage of what's there." The data, 
he said, could be packaged in 
data marts for use in solving 
problems throughout the organi- 
zation. Previous EA solutions 
have required professional ser- 
vices to get reports for use in 
strategic planning, he claimed, 
adding that Troux has created 
interfaces for data marts that 



allow business analysts to use the 
data without having to know 
SQL to get at the data. 

Large organizations often 
have a variety of domain archi- 
tects — data architects who doc- 
ument data and relationships, 
application architects who mod- 
el and document application 
components, business process 
architects and system architects. 
With UML and business process 
analytics interfaces, among oth- 
ers, Troux is positioning the plat- 
form as the authoritative system 
for domain architects. "Organi- 
zations can gain controls and 
efficiencies over what they 
have," Van Riper said. "It gives 
the overarching view of the rela- 
tionships between business 
processes, infrastructure, appli- 
cations and skills." I 
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Portland 1.0 Seeks to Simplify Linux GUIs 



BY ALEX HANDY 

For Linux developers, Portland 
could be the city of salvation. In 
mid-October, the Open Source 
Development Labs released 
version 1.0 of Portland, a set 
of common interfaces for 



GNOME and KDE, the popu- 
lar X Windows GUI overlays. 

The project was spawned at 
an OSDL-sponsored meeting 
last December in Portland, 
Ore., that brought together a 
group of desktop architects. 



"Ten months from idea to 1.0 is 
pretty impressive in the open- 
source industry," said John 
Cherry, OSDL desktop Linux 
initiative manager. 

The Portland Project has 
taken the form of a set of com- 



mand-line tools, according to 
Cherry, that can be used by 
developers to make their appli- 
cations readily compatible with 
both GNOME and KDE. The 
tools handle simple things that 
had yet to be solved across both 
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platforms: They offer applica- 
tions a way to associate MIME 
types, a method to install icons 
in quick launch menus, and to 
select the proper e-mail client 
for sending messages from 
within an application. 

Another piece of the Port- 
land Project offers applications a 
way to engage with GNOME 
and KDE's screensavers and 
energy-saving controls. "How 
many times have you been giv- 
ing a presentation when your 
screensaver comes on?" asked 
Cherry. The Portland Project 
offers a path for applications to 
tell the operating system to hold 
off on initializing the screen- 
saver or dimming the screen. 

Why does Linux need these 
seemingly simple tools? Said 
Cherry: "It's just a case of KDE 
and GNOME doing it differ- 
ently. On their own, they both 
implement these capabilities 
very well, but when an applica- 
tion developer wants to port to 
Linux, and not a specific Linux 
desktop, he has to make a sepa- 
rate package for GNOME and 
for KDE." 

PRINTING UP NEXT? 

Next on the agenda for the 
Portland Project are some of 
the higher-level bugaboos still 
left in the Linux space, said 
Cherry. "There are many dis- 
cussions going on right now as 
to what a Portland 2.0 would 
be. It would probably present 
services such as printing or 
desktop fonts to applications in 
a consistent manner. Printing is 
a big one. Audio and multime- 
dia is a big one, too. It may also 
be looking at common installa- 
tion formats and common 
installers," said Cherry. 

The release of the Portland 
Project came just days before 
the 10th anniversary of the 
release of KDE. 

The project was started by 
Trolltech's Matthias Ettrich, 
then a student at the University 
of Tubingen, in Germany. Since 
then it has become the most 
popular desktop environment 
for Linux. Its primary rival, 
GNOME, is only one year 
younger, and Cherry said that 
the two environments now make 
up more than 98 percent of all 
installed Linux desktop environ- 
ments. There are dozens of oth- 
er window managers available 
for Linux, and Cherry said that 
adding them to Portland would 
be a relatively easy affair. I 
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Select Readies Services for Reuse 



BY DAVID RUBINSTEIN 

Components are out. Services 
are in. 

Select Business Solutions in 
mid-October released a re- 
named and updated flagship 
product, Solution Factory 7.0, 
dropping the word "compo- 
nent" from the title, and entire- 
ly rewrote the code of its Asset 
Manager piece to update the 
metamodel, take in the 
Reusable Asset Specification 
and go fully thin-client. 

One of the pieces of Solution 
Factory is Select Architect, the 
modeling tool that supports 
BPMN, UML and data model- 
ing, according to Hedley Apper- 
ly, senior vice president at 
Select, which was purchased in 
February by Avantce Software, 
a private equity firm. Solution 
Factory gives modeling support 
for business processes, system 
designs and traceability through 

Agile Beefs Up 
PLM Platform 

BY P.J. CONNOLLY 

Agile Software released a new 
version of its e6 product man- 
agement tools for engineering 
and manufacturing last month, 
offering new support for inter- 
national users and adding sup- 
port for the latest generation of 
Microsoft database technology. 

The e6 platform incorporates 
modules covering customer 
needs management, engineering 
collaboration, product data and 
portfolio management, as well as 
configuration management and 
maintenance, overhaul and 
repair tracking software. 

Agile e6 is now "internation- 
alized," allowing the use of the 
Unicode character set to repre- 
sent data in multiple languages. 
The new version works with 
Microsoft SQL Server 2005, in 
addition to SQL Server 2000 and 
Oracle databases. 

The company is pushing 
security in the refreshed e6; 
administrators can now grant 
access rights to external partners 
at corporate, business unit and 
departmental levels. The origi- 
nal Agile e6 allowed only exter- 
nal access on a project basis. 

Agile e6 integrates with 
authoring systems such as 
Microsoft Office, CAD systems 
including Parametric Technolo- 
gies' Pro/Engineer and UGS NX 
and ERP systems such as SAP! 



the source code and database 
schema, Apperly said, creating a 
model-driven, services-based 
approach to development. 

New to this release of Select 
Architect is the ability to turn on 
or off diagram views based on a 



persons role in the organization, 
he explained. There also are 
XML Schema Generation exten- 
sions to create Web services. 
Finally, the new version inte- 
grates with Visual Studio 2005. 
Select Asset Manager, for- 



merly Component Manager, is 
now a fully Web-based applica- 
tion running on the company's 
repository, Apperly said. "We 
wanted there to be no install," 
he said of the product that 
helps users publish, manage, 



find and reuse software assets. 
New to Asset Manager are 
knowledge assets based on the 
RAS 2.2 specification. One of 
the goals of the Asset Manager 
rewrite, Apperly explained, was 
to facilitate collaboration 
between the consumers and 
suppliers of assets through the 
Web interface. I 
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programmers.com/ca 



AIIFusion® ERwin® Data 
Modeler xl Plus 1 Year 
Enterprise Maintenance 

byCA 

Introducing AIIFusion® ERwin® Data Modeler 
r7, rising to the challenge of successful 
information management starts with optimal 
database design. Enables visualization of 
complex data structures, inventory informa- 
tion assets and establishes enterprise-wide 
standards for managing data. Automates the 
design process and synchronizes the model 
with the database design. Use this product 
to design transactional systems, data marts 
and data warehouses in one integrated 
environment. Enhanced "out of the box" 
support for Oracle 10g/9i. 



c-tree Plus® 

by FairCom 

With unparalleled performance and sophistication, 
c-tree Plus gives developers absolute control over 
their data management needs. Commercial 
developers use c-tree Plus for a wide 
variety of embedded, vertical market, 
and enterprise-wide database applications. 
Use any one or a combination of our flexible 
APIs including low-level and ISAM C APIs, simplified 
C and C++ database APIs, SQL, ODBC, or JDBC. 
c-tree Plus can be used to develop single-user and 
multi-user non-server applications or client-side 
application for FairCom's robust database server 
— the c-treeSQL™ Server. Windows to Mac to 
Unix all in one package. 

programmers.com/faircom 



dtSearch Web with Spider 

Quickly publish a large amount of data to a Web site 

• Dozens of full-text and fielded data search options. 
•Highlights hits in XML, HTML and PDF, while 

displaying links and images; converts other files 
("Office," ZIP, etc.) to HTML with highlighted hits. 

• Spider adds local or remote web sites (static and 
dynamic content) to searchable database 

• Optional API supports SQL, C++, Java, and all 
.NET languages. 

"Bottom line: dtSearch manages a terabyte of 
text in a single index and returns results in 
less than a second. " — InfoWorld 



64-bit 
Available! 

Paradise # 
F010131 

$ 850." 
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Paradise # 
S8403E6 

$ 2437." 



PowerBuilder 10.5 
Enterprise Edition 

by Sybase 

Introducing PowerBuilder 10.5, the newest 
release of the premier 4GL RAD tool that 
accelerates your application development. 

New features include: -m 

• User Interface with new icons, menus, toolbars 

• Rich text control and datetime picker control 

• Treeview, a new DataWindow® presentation style 

• DataWindow functionality, including autosize 
height on all bands 

• BYTE and 30-digit DECIMAL datatypes 

• Enhanced Web Services implementation 

programmers.com/sybase 

SlickEdit vll 

by SlickEdit Inc. 

! SlickEdit is the multi-platform, multi- 

I language code editor that enables 

I power programmers to create, navigate, 

i modify, and debug code faster and more 

I accurately. SlickEdit has the capacity to 
idle large code bases and challenging 

! programming tasks. 

i Customize SlickEdit to match your coding 

I style. For the ultimate in extensibility, 

i use Slick-C to write your own macros. Windows Edition 

Paradise # 
M39029J 

$ 275." 

programmers.com/slickedit i 



New .NET 
Spider API 

dtSuarch 



Download dtSearch Desktop with 
Spider for immediate evaluation 



Single Server 
Paradise # 
D290726 

$ 888." 

programmers.com/dtsearch 



TX Text Control 12.0 

Word Processing Components 

TX Text Control is royalty-free, robust and 
powerful word processing software in reusable 
component form. 

•. NET WinForms control for VB.NET and C# 

• ActiveX for VB6, Delphi, VBScript/HTML, ASP 
•File formats RTF, DOC, HTML, XML, TXT 

• PDF export without additional 3rd party 
tools or printer drivers 

• Nested tables, headers & footers, text frames, 
bullets, numbered lists, multiple undo/redo 

• Ready-to-use toolbars and dialog boxes 




Professional Edition 

Paradise # 

T7902 1 8 

$ 739 99 

Download a demo today. 



programmers.com/theimagingsource 



Xtreme SuitePro 2006 

by Codejock Software 

With Xtreme SuitePro 2006 for ActiveX/COM you 
can create powerful enterprise class applications that 
incorporate a full set of highly customizable user 
interface components that include Microsoft® Office 
style toolbars and menus. Several popular visual 
styles are included such as Microsoft® Office XP, 
Office 2003, Windows Vista and Visual Studio .NET. 



Individual components: 

• Xtreme CalendarPro 

• Xtreme CommandBars 

• Xtreme DockingPane 

• Xtreme PropertyGrid 



» Xtreme ReportControl 
» Xtreme TaskPanel 
» Xtreme ShortcutBar 
» Xtreme SkinframeWork 



Paradise # 
CBC004S 

$ 357." 



programmers.com/codejock 



Multi-Edit 2006 

by Multi Edit Software 

Speed, depth, uncompromising program 
access, Multi-Edit 2006 provides a great 
tool for your programming arsenal. Search 
with definable filters & Perl 5 Regular 
Expression support. BCDiff by Scooter 
Software powers up ME's file compare 
utility. Other features are integration 
with ImageMagic, Delphi 2006, C++ 
Builder 2006, Visual Studio 2005, 
code beautifying support for ASP, C/C++, 
C#, CMAC, CSS, HTML, Java, JavaScript, 
JSP, PHP, Pascal/Delphi, Perl & Python. 
Handle 50+ languages + Ruby. 



Hew 
Release' 



Paradise # 
A30016W 
99 



5 193. 



Upgrade 
A30016Y 

$ 116." 

programmers.com/multiedit 
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Cordys Framework Adds AJAX r XForms 



BY P.J. CONNOLLY 

Business processes are too 
important to be left to code- 
slingers, according to applica- 
tion framework vendor Cordys. 
So the update of its Composite 
Application Framework in- 



cludes new features designed to 
improve usability across a wide 
variety of scenarios. 

The framework is an XML- 
based architecture that imple- 
ments an open SOA with a five- 
tier model layered from users 



down to data. 

Cordys' chief of product mar- 
keting in the United States, 
Reint-Jan Holterman, boasted 
that the frameworks design is 
organic, "without doing external 
acquisitions, and then gluing 



them together, 
panies are usin 



About 25 com- 
the Cordys 
framework thus far, Holterman 
noted, as so-called "lighthouse" 
or reference accounts. 

Holterman said the frame- 
works can be used as follows. At 



It's amazing 

what you can do with 
the right tool! 
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A project isn't quite right when you 
don't use the appropriate tool. The same is tftie 
for application dev^opment, Without the appropriate 
tool your a pp lication isn't q u Jte ri g hL Why wa 5te the 
time with components that twe Jess functionality? 
Spread is all yo j'II need to get the job done right the 
first time. Spread is the i&nsumm&te spread/grid 
development component, Log on to www.-Tpoint.toni 
to download a 30-day free trial and check out our 
other great products. 



FarP#int 

www.fpolnt.com 
or 1-800-545-5913 



Providing flexible, powerful and 
reliable solutions for your 
development needs. 



the top level, the user experi- 
ence, version 4.2 of the Cordys 
framework adds the Web Work- 
place, a browser-based rich 
client that allows users to create 
composite applications that com- 
bine application modules, data, 
services and other resources. 
The Web Workplace includes an 
AJAX toolkit and Cordys' imple- 
mentation of XForms, to aid in 
creating applications with stan- 
dards-based services, for greater 
flexibility as business require- 
ments change. 

The second tier of the Com- 
posite Application Framework is 
an intuitive, visual business 
process management (BPM) sys- 
tem that business process man- 
agers can use to design, manage 
and execute business processes 
on the frameworks third tier, a 
Web services-based enterprise 
service bus (ESB). Cordys BPM 
includes a process designer 
based on the Business Process 
Modeling Notation (BPMN), 
which is also browser-based and 
uses AJAX. The Cordys BPMN 
Designer can import process 
models through the Business 
Process Execution Language; 
analysts can use business activity 
monitoring tools in the frame- 
work to identify processes 
requiring optimization. 

The Cordys ESB comes with 
a variety of application adapters 
in the box; the company partners 
with other connector providers, 
including iWay Software and 
Seagull Software, to cover spe- 
cialized cases. The ESB imple- 
ments SOAP over multiple pro- 
tocols, including HTTP and Java 
Message Processing, and uses a 
stateful XML object model that 
supports distributed services for 
load-balancing and scalability. 

The Cordys Application 
Framework's fourth tier is 
Cordys WS-AppServer, an appli- 
cation server optimized for the 
other framework components 
with XML communication and 
designed for the efficient and 
speedy creation of high-capacity 
transactional systems. The 
Cordys application server allows 
the use of plain Java when defin- 
ing business logic. 

The final tier is Cordys Mas- 
ter Data Management, a frame- 
work for maintaining data consis- 
tency across apps and databases 
that includes data modeling 
tools, support for data mapping, 
comparator- and trigger-based 
change detection, and multiple 
synchronization modes. I 



W WW. n software.com 



'J) sof twa re 



the professional developers' #1 choice for 

communications, security, and e-business 

components 



Internet Communications 



Internet Business 



Enterprise Adapters 



(P*Worksi Products 



IB ii Integrator Products: 



BteTaik Adapters: 




..TCP/IP 
_5SL 

-5/5heli 
.- Zip 




. Qu ■■_k.3r.iulc b 

. E-Paymsric 
, Vita IPS 
, Paymeru€_ti 
USPS 
OFX 
PayPal 




...AS2/EDMNT 
_. SFTP 
-.FTP. 
„F1P 

-, Secure sneH 

... Email 

_. SccUK tmall 



Our tf^shap product line. The result 
Df more than a dc-cade of res&ann 
and dMtaement tn twitding internet 
connectivity tools for professional 
raflwAre developers. 

Components far 

W$t? are: W*b Services, EmaR and 
Newt, FlJe Transfer Sockets ar-J 
5&icaming r RnmoDc Access, :n=ta.nt 
MessaqTia, bSL and scare Shal Se 
curnVx certlficata Management & Q-fr 
BttDn, 5/Mime Encryption, SHMP Net- 
work Management FHe ft Streaming 
Compression, E-Business (62 BJ 
Transactions 



The- IBez product line pmwtes small 
and rnediufFi-seca companies with en- 
terprise-class sofe^rnre eomporiertts for 
Internet business integration- Built on 
tap aF our award" winning IP*Wflrtsl 
knl*, these easy-to-use components 
enasfc develops - * to es&ifr .'ntegrnte 
common small budness processes. 

Components for : 

•Accounting integration [CJuldkBooks i, 
credit card Processing, AOH / E -Cheek 
ProccsKng, Shipp^B Bfid "racting, 
Hanking cind Riandri TransidDons 
(OFH), PayPal Herthant Service*. 



The f n software adapters £Kteid Mi- 
crosoft BtfTaifc wjui advanced Interne? 
COTmuricatoo-ns, s«urrty, and e-busi- 
ness CBp-aNlltJes, imdudiirHj robust, 
highly scalable, fully EnTegrats? impifr- 
mentations, of 310 mesragkig md se- 
cure:- communications probooo-fe. Certi- 
fied by Unisys and etkj^nesiAeady for 
performance and iffi&xjperatillity 

Adapter* for : 

EDI- [NT A5z mtegrs&ov secure Fie 

Transfer, feu re Shell Remote Execu- 
tion, Secure Email, GosetteNa: Con- 
nectivitv^ *M£5B / G1SB Messaging, 
and more 



ASK ABOUT OUR MSDN -STYLE ALL INCLUSIVE RED CARPET SUBSCRIPTIONS: 800-225-4190 












/ 




IBM. ihu IBM :Lvi aiiu Hriti-ul sim rL jj^iu j undsfii J a if InmmsLkHiU BdUnctfiL Mufiftoii-Co^rfliiH in hHAihtf Btiiat i-J-u- 1 utfw uurtniu. 
■i-saag ilFJ ^Tpciilkn Ertpefl ti a haflV"\ajk iri Eg*b>* Faundaflan. In" J Jid h a Liajjarrivk ol Sun ftflcroni^flfliTW. Inc. All i4j-ii mHTAd. 



/ 







J s 


9 




|j/3lM 






.INFRASTRUCTURE LOG 

_DAY 15: TTiis project's wt of control. The development 
tern's trying to write opps supporting a service oriented 
architecture, but it's taking forever, Gil's resorted to 
giving Idiem all toffee IVs. Haw they're on Java dhile using 
JAVA. Dh, the irony- 

_DA¥ 16: Big crisis— we've just run out. of half-cmd-halfEJ 

_DAY IS] I ve Found a better way: IBM Ratiorsol. It's a 
modular software development p Lab Ponn based on Eclipse 
that helps the tern model, sssenbLe> deploy and rranogo 
service oriented architecture projects- T>ie whole process 
is sifter and foster, and all our apps ore flexible and 
reusable- The software we write today will be the software 
we use tomorrow, i) 

JTie teem says it + s nice to taste ocHFfee again, but actually 
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lona Revs Artix ESB for Interoperability 



BY P.J. CONNOLLY 

lona Technologies announced 
the availability of a new release 
of its Artix enterprise service bus 
that adds SOAP 1.2 features, 
content-based routing and 
remote method invocation for 
better interoperability across 
platforms and protocols. The 
new release also offers enhanced 
manageability through a man- 
agement console that incorpo- 
rates JMX (Java Management 
Extensions) technology. 

Artix Orchestration 4.1 
allows business analysts and 
developers to create complex 
composite services and process 
flows with WS-Addressing, 
while the metadata-driven 
process orchestration is imple- 
mented at selected system end- 
points instead of a centralized 
server, with the aim of improv- 
ing performance. 

The orchestration capabili- 
ties of Artix now include the 
ability to pass secure credentials 
between services built on estab- 
lished BPEL processes through 
the use of security identity prop- 
agation. Artix's implementation 



of WS-RM (Web Ser- 
vices-Reliable Messag- 
ing) persistence allows 
applications to communi- 
cate without worrying 
about message delivery 
at the component, sys- 
tem or network level. 

lona product market- 
ing manager Andrew 
Broadstone noted that 
the company is no new- 
comer to SOA technolo- 
gy, having had years of 
experience in service- 
oriented architectures; 
first with CORBA, and 
in recent years with an 
approach that takes 
advantage of the in- 
creasing usability of 
Web services. 

Broadstone argued 
that the primary chal- 
lenge in IT today is dealing with 
heterogeneous legacy applica- 
tions: "They have a lot of invest- 
ment in existing systems, they 
can't afford to replace it all, 
[and] they need to create ROI 
on the existing systems, while 
driving the costs down." 
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The Artix Orchestration Console lets users define business processes graphically. 



Seamless failover and load 
balancing of different back-end 
Web services is enabled through 
Artix's quality- focused BPEL 
implementation, eliminating the 
need to manage failover and 
retry logic when receiving ser- 
vices are unavailable. In addi- 



tion, Artix 4.1 packages a num- 
ber of examples of Artix Orches- 
tration processes and related 
BPEL activities. 

The content-based routing of 
Artix 4.1 is based on the XPath 
XML path language, and allows 
SOA endpoints to maintain a so- 



called "loose" connection. This 
provides efficient integration of 
applications around individual 
business events. 

The new release of Artix 
works with Java 5.0 for broader 
platform support. Also, the 
Artix Designer now runs on 
Eclipse 3.2 and Solaris systems, 
while the Artix Orchestration 
BPEL engine adds support for 
HP-UX. Artix 4.1 recognizes 
the semantic and syntax 
changes found in SOAP 1.2, as 
well as SOAP 1.1 formatting, 
for continued interoperability. 
Also on the standards front, 
Artix now speaks BPEL 1.1, 
and allows AIX, HP-UX and 
Solaris systems to receive 
BPEL process flows. 

In addition, the new version 
of Artix offers tighter integra- 
tion with the services of SOA 
governance pioneer Amber- 
Point, including a plug-in agent 
that uses automatic service dis- 
covery and registration to 
improve performance report- 
ing, while enabling dynamic 
configuration of policy changes, 
alarms and triggers. I 



SD Times 1DD Winner's Profile 



Fortify Software 





Fortify Software's products protect companies from the threats 
posed by security flaws in business-critical software applications. 
Its products, Fortify Source Code Analysis Suite, Fortify Security 
Tester, Fortify Application Defense and Fortify Software Security 
Manager, drive down costs and security risks by automating key 
processes of developing and deploying secure applications. 

As Mike Armistead, a Fortify co-founder, explains, "Fortify is 
the de facto leader in software security code analysis and the only 
vendor to offer products that cover three critical phases of the life 
cycle." Fortify was named to the 2006 SD Times 100 in the Software 
Security category. 

During development, Fortify Source Code Analysis 
identifies vulnerabilities in applications and pro- 
vides information to prioritize and fix important 
issues quickly. Fortify Security Tester turns functional 
tests into security tests, so that QA teams can judge how 
applications perform under attack, and Fortify Application 
Defense monitors and protects running applications from 
attack. Then, Fortify Software Security Manager pulls it 
all together, letting managers track trends, compare projects 
and collect key performance metrics. 

Fortify's products fit into and enhance existing audit 

and development processes, no matter the methodolo- 

gy-from XP to classic Waterfall-and support many 

languages, such as Visual Basic, C/C++, C# and Java. 
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More than 75 customers in multiple industries, 
including financial services, manufacturers and ISVs, use Fortify's 
products. "The depth to which our products reach to obtain securi- 
ty problems makes them easier for developers to take action on," 
Armistead says. "Their comprehensiveness is also a key factor in 
their value. We don't just tell you that you have a problem; we help 
you fix it. We believe that software security requires multiple tech- 
nologies at various phases of the life cycle." 

Fortify turns exposed and vulnerable software into fortified 
applications able to withstand attack, using patent-pending tech- 
nology that strengthens software "inside out" rather than the "out- 
side in." In addition to detecting and removing security vulner- 
abilities and insulating apps from attack, Fortify's solutions track 
progress and compliance across projects. 

"Our company is comprised of people that have combined 
expertise in software development and security," says Armistead. 
"Fortify is backed by leading investors, including Kleiner, Perkins, 
Caufield 8t Byers, and a world-class team of software security 
advisors and partners." 

Armistead concludes, "We help customers turn security poli- 
cies into secure code, secure code into secure applications, and 
secure applications into secure business processes at runtime." 
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Gooale Extends Search to Source Code 



BY ALEX HANDY 

Google has aimed its Web 
crawlers at source-code reposi- 
tories around the Internet. In 
early October, Google opened 
the gates to Google Code 
Search, and already more than 
a billion lines of code have been 
indexed. 

Tom Stocky, product manag- 
er at Google, said that Google 
Code Search (www.google.com 
/codesearch) started out as an 
internal project to make the 
company's catalog of code easier 
to search. Eventually, the com- 
pany decided to begin indexing 
external code. That, said Stocky, 
meant indexing the contents of 
source-code repositories, zip 
files and other storage mediums. 
Since Google is already crawling 
through millions of Web sites 
per day, it was easy to add filters 
specific to source code, said 
Stocky. "Historically, Google 
hasn't crawled those things. 
Now we're opening them and 
indexing them," said Stocky. 

Google Code Search is 
based on the standard Google 
search system. That means 
developers can brew up regular 



expressions, such as boolean 
queries, and point their searches 
at individual repositories to nar- 
row the field. 

For the most part, Google 
Code Search includes the same 
standard features as its main 
competitors, Krugle.com and 
Koders.com: searching by lan- 
guage, license or package 
name. Stocky said that Google 
will also release an API that will 
give developers an external 



entryway into the search 
engine, perhaps for use along- 
side IDE plug-ins. 

"From the Google perspec- 
tive, developers are more and 
more the way our products are 
reaching scale," said Stocky, 
referring to the common Web 
2.0 practice known as crowd- 
sourcing. Similar to outsourc- 
ing, crowd-sourcing relies on 
the public to create content 
themselves, similar to the way 



in which sites such as 
Flickr.com and Wikipedia are 
expanded. Stocky said he 
expects that enthusiastic open- 
source developers will show the 
direction in which the service 
should expand. 

While many dot-coms would 
run screaming for the hills at 
the sight of an approaching 
Google, Krugle.com, a source 
code search engine launched 
earlier this year, isn't hiding. 



COMPARING THE SEARCH ENGINES 



Krugle.com CEO Steve Larsen suggested that 
users compare code search engines by pushing 
the same search guery into each engine, then 
comparing the results. We did just that, search- 
ing across all four sites for the term "Python 
Forum." In theory, this should have returned the 
source code for a Web forum written in Python, 
but in practice, further search refinement obvi- 
ously is reguired. The results follow. 

Koders.com: 30 results. The top result was titled 
"RSS Mix Tape" and was not a forum written in 
Python. It should be noted that without specify- 
ing Python as the desired language in a drop- 
down menu, Koders.com produced 65 results, 
most of which were in languages other than 
Python. 



Krugle.com: 418 results. The top result was a 
forum export script written in Python, not an 
actual Web forum written in Python. The code 
was part of a larger project, and this project was 
displayed as a hierarchy tree along the right side 
of the screen. 

Google.com/codesearch: 600 results. The first 
result was a Python-based shell, not a Web forum 
written in Python. The shell was part of a larger 
project, and links to other files in this project 
were listed along the left-hand side of the screen. 

Labs.oreilly.com/code: No results. It should be 
noted that the O'Reilly code search engine in- 
dexes only source code found in that company's 
published books. 



Steve Larsen, CEO of 
Krugle.com, said Google's 
entrance into the source code 
search engine space is a valida- 
tion of his company's work. 

"In the end, a search engine 
is judged by the relevance of 
its rankings, and Google is still 
relying on a page rank 
approach, while Krugle relies 
on a semantic understanding of 
the contents of a code file and 
how well that relates to a 
query," said Larsen. "I think 
people would do well to com- 
pare the offerings. Take half a 
dozen search terms, put them in 
Krugle, then put them in 
Google and see who has got the 
most relevant results." 

But Google and Krugle.com 
aren't the only games in town. 
Koders.com was the first code 
search engine to launch, and it 
currently indexes just over 250 
million lines of code across 
dozens of languages. Earlier 
this year, book publisher 
O'Reilly Media released a code 
search engine to index all of the 
code it includes in its books. 
That search engine is online at 
labs.oreilly.com/code. I 
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Nexaweb Plays It Both Ways 



Universal Client Framework translates XML to AJAX or Java 

BY ALEX HANDY to rich Internet applications. day that Nexaweb intends to prietary XML application 

While JavaScript has little to But making the choice release its Universal Client descriptions into cohesive rich 

do with Java, the two Ian- between the two won't be nee- Framework (UCF), a tool that client applications, 

guages are popular on-ramps essary on Nov. 30. That's the compiles the company's pro- According to Nexaweb 
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ActiveRe ports features an easy-ta-use H banded, fully integrated report designer with 
built-in wizards, integrated toolbars, report and field explorer window, prrnt preview 
with bookmarks,, t&xt search and thumbnails, a full- featured chart ■ •:; n irol, and a 

detailed help file. With Active Reports, It is easy ta create the kinds of reports you 
fTeed-from the most bask to the most compticated reports. 

EASY to LICENSE 

Licensing with ActiveReports for .NET is straightforward and easy to understand. There 
are no hidden cosls, no extra Eke rising f&ts and no royalties charged for end users. 
Once you Install the product after purchase, you are free to create and deploy your 

re-parts as needed, 

EASY Eo DEPLOY 

ActiveRe ports makes deploying your reports and end-user reporting capabilities 
easy. Th* reporting engine is prodded is a smgfe managed, sLrongnamed assembly. 
Activekeports allows assemblies to be distributed using XCopy or placed in the Global 
Assembly Cache (CACJ. 
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CTO and founder Coach Wei, 
the Nexaweb UCF can com- 
pile XML application descrip- 
tions into either Java or 
JavaScript. To do this, users 
must either insert the Java- 
Script framework into their 
desired Web page, or install 
the Java client on the end 
user's machine. Then, these 
interpreters parse the XML 
file created on the back end 
and translate it into functional 
JavaScript or Java, accordingly. 
"We don't use a compiler 
approach," said Wei. "We don't 
use that model because that's 
not the way the Web works. 
The markup pages are deliv- 
ered directly. In the Nexaweb 
situation, when a customer 
develops an application in 
XML, those applications are 
delivered on the client side, and 
they are processed on the client 
side." Wei said that this makes 
it easier to handle things like 
DOM and presentation. 

CHANGE AN OPTION 

Wei also stated that having the 
choice to deploy these applica- 
tions to either Java or Java- 
Script gives developers the 
option to change their minds 
after initial deployment. A Java 
development house can then 
remove a Java-based RIA and 
replace it with a JavaScript- 
based one if desired. 

For developers uncertain of 
which language to use for their 
application, UCF offers both 
avenues, provided the develop- 
ers are willing to learn the 
declarative XML needed to 
script applications for UCF. 

"They need to learn what 
this XML syntax means. But on 
the other side, those tag names 
are fairly straightforward, and 
we also provide a plug-in to 
Eclipse so customers can drag 
and drop to create their appli- 
cations," said Wei. 

While the current version of 
UCF includes only Java and 
JavaScript translators, future 
versions will include facilities 
for .NET The system will cost 
around US$10,000 per server 
installation, said Wei. 

The UCF is built on the 
foundations laid by Nexaweb's 
pet Apache project, XAP. The 
project encompasses the XML- 
to-JavaScript translation func- 
tions of the UCF tool, and is 
available as a free and open 
source utility today. The rest of 
the UCF product, including the 
Java translation capabilities and 
the Eclipse plug-in, are available 
only from Nexaweb for a fee. I 
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MuleSource Carries Integration Burdens 

VC funds help start-up company bring forth open-source ESB solution 



BY ALEX HANDY 

Open-source developers can be 
stubborn as mules. So it's usual- 
ly a good thing when a company 
forms behind a popular project: 
Developers are better left to 
code than to manage hundreds 
of other developers around the 
world. As of October, Ross 
Mason's enterprise service bus 
(ESB) project Mule has joined 
the ranks of corporate-backed, 
open-source projects. 

Mule was created in 2003 by 
Mason to help solve some of 
the integration problems he 
was seeing in large environ- 
ments. With many different 
scripting languages used for 
smaller projects and the heavy- 
weight frameworks dealing with 
the infrastructure, Mason saw 
an opportunity to build a tool 
that could normalize and han- 
dle the transportation of data 
between disparate applications. 

The Mule project grew 
quickly, and garnered a great 
deal of attention from desperate 
integrators looking for a fast 
solution to the problems associ- 
ated with disparate data sources. 

MULE TEAM TAKES OFF 

In 2005, Dave Rosenberg met 
Mason at JavaOne in San Fran- 
cisco. A year later, the pair was 
ready to sign with its first ven- 
ture capital partners. Today, 
Rosenberg is CEO and Mason 
is CTO of the newly founded 
MuleSource, which opened its 
doors in October. The compa- 
ny is offering service and sup- 
port contracts as well as an 
administration interface to 
customers willing to shell out 
some cash for the Mule team. 

Rosenberg said that his pre- 
vious employer, a large financial 
services firm, pushed him 
toward the MuleSource job. 

"In financial services compa- 
nies, you never throw anything 
away," said Rosenberg. "Nor- 
mally, around 70 percent of 
your time is spent integrating 
systems, but in financial ser- 
vices, 90 percent of our time 
was spent on this. I was strug- 
gling with an integration chal- 
lenge with three systems. One 
was a Java LAMP stack, one 
was a Microsoft SQL Server 
data repository, and then they 
introduced a .NET application. 
To say that it threw everything 
off is an understatement." 

Now that Mule has financial 



backing, Rosenberg said that 
2007 should open up with the 
release of Mule 2.0. That ver- 
sion will feature performance 
tweaks that bring the ESB clos- 



er to real-time transaction capa- 
bilities. This new version will 
also improve clustering and 
failover support. Finally, the 
company will be offering an 



Eclipse-based IDE for point- 
and-click code modifications. 

Outside of the contributions 
of this new company, the Mule 
project will continue to grow 



through contributions from 
third-party developers, said 
Rosenberg. He said that many 
firms contribute their plug-ins 
and Mule additions. Currently, 
said Rosenberg, there are more 
than 1,000 developers on the 
Mule mailing list, and the soft- 
ware has been downloaded 
some 200,000 times. I 
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global revenue report 
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( 9:12 a.m. - Windward 
Reports lets Beth quickly 
create templates and generate 
impressive, data-rich reports. 




9:45 a.m. - Beth delivers 
the reports and moves on to 
other important tasks. 




Why do developers and managers choose Windward 
Reports over any other reporting software in a 
New-York minute? 

Because it allows users like Beth to design custom 
report templates on their own with Microsoft Word® (or any 
other word processing program) and without eating up 
developers' time. 

In addition, Windward Reports only takes a developer 
a few minutes to install, not hours or weeks like other 
reporting programs. Plus its flexibility and ease-of-use 
give your organization the power to improve productivity 
exponentially (barring any mass pencil-balancing outbreaks). 

Try our FREE online demo at 

www.windwardreports.com and discover 

why it's time to switch to Windward Reports. 
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Helping to Master the 'Master-Data' Problem 

TIBCO tool reconciles inconsistent data across applications, business processes 



BY JENNIFER DEJONG 

It's easy for business executives 
to call their companies "cus- 
tomer-centric." But behind the 



buzzword lies a difficult chal- 
lenge for developers: How do 
you create a single view of the 
customer, when the data about 



that customer is inconsistent 
across multiple applications and 
services? 

That is the problem TIBCO 



Software aims to address with 
its Collaborative Information 
Manager. The company last 
month announced CIM 6.0, 
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enabling the data repository to 
function for the first time as a 
service in a larger service-ori- 
ented architecture. 

CIM allows a business to 
create and maintain a consis- 
tent master record of cus- 
tomer data, and to keep that 
information current. That 
saves developers from having 
to hand-code changes each 
time data is updated. And it 
eases integration of applica- 
tions that cut across multiple 
systems and departments, said 
Neeraj Gokhale, general man- 
ager for the CIM business unit 
at TIBCO. 

A company cannot take full 
advantage of service-oriented 
architectures until it reconciles 
inconsistent versions of cus- 
tomer information housed in 
back-end systems, such as cus- 
tomer relationship manage- 
ment and enterprise resource 
planning applications, he said. 
"You have to make sure all 
transaction systems are in 
sync," according to Gokhale. 
"[But at most companies], not 
all systems identify you as the 
same person." 

CUSTOMER AS A SERVICE 

New to 6.0, which was expected 
to ship in mid-October, is the 
ability to expose customer 
data — or other key information, 
such as product data — as a Web 
service. 

That allows services within 
an SOA to interrogate the 
repository, ensuring access to a 
single version of accurate, up- 
to-date customer information. 
Previous versions relied on 
XML to extract data, Gokhale 
said. 

Pricing for CIM 6.0 was not 
made available. 

Also new are governance 
features, enabling businesses to 
set policies that specify which 
attributes of which records are 
managed by whom. 

"Who is authorized to 
change a customer phone num- 
ber in the master record?" he 
said, offering an example. "The 
call center people, the billing 
system, the customer who 
enters that information on the 
company Web site?" The right- 
ful owners of that data must 
control that data, he said, for 
any type of meaningful data 
exchange to occur. I 
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Dabbling in Code 
0K r Panelists Say 

Call open-source work beneficial to all 




BY ESTHER SCHINDLER 

Some application development man- 
agers are glad to have their employees 
participate in the open-source commu- 
nity, working to enhance some project. 
However, others may feel that such 
activities are distracting from the "real 
work" that's on the developer's desk. 

That's the wrong attitude to adopt, said 
industry luminaries in a panel discussion 
held during the Gartner Open Source 
Summit in Phoenix in October. In addi- 
tion to the predictable 
topics of enterprise adop- 
tion of Linux, open- versus 
closed-source guidelines 
and software security, 
the conference attendees 
were given specific advice 
in the "Mastermind Pan- 
el" about the relationship 
of an enterprise with its 
employees who may wish 
to contribute to open- 
source projects. 

The programmers who Working on open source is an 
write open-source applica- education in more than code, 
tions are no longer lone says CollabNet's Behlendorf. 
gunmen working on their 
own, if that was indeed ever an accurate 
description. Mike Millinkovich, executive 
director of the Eclipse Foundation, said 
85 percent of its committers are full-time 
employees somewhere, who are paid to 
write the code. Eclipse may be an anom- 
aly (45 percent of its 740 committers work 
for IBM, from which the project was spun 
off), though less so than it used to be (two 
years ago, 80 percent of committers were 
IBMers, according to Millinkovich). Yet, 
those percentages don't appear to be far 
off. Based on a hands-raised survey of the 
IT audience, at least half have employees 
as committers in open-source projects. 

One reason for managers to encour- 
age developers to participate in the 
open-source community is "to drive this 
as a [programmer] skill set," said Brian 
Behlendorf, founder and CTO of Col- 
labNet and former director of The 
Apache Foundation. 

Stuart Cohen, CEO of Open Source 
Development Labs, suggested that 
employees should be expected to inves- 
tigate open-source solutions as part of 
their personal development, in the same 
way you may expect them to learn about 
tools for Visual Studio programming or 
to gain Cisco certification. 

By doing so, commented Yefim 
Natis, Gartner vice president and distin- 
guished analyst, "you develop internal 
expertise in the products the company 
relies on." It also enables enterprises to 
ensure that the open-source software to 



which the company is committed con- 
tinues to provide functionality that's 
internally valuable. 

In another "hands-raised" survey of 
conference attendees, nearly every par- 
ticipant said they'd looked at the source 
code on an open-source project, and 
about 35 percent said they changed the 
code and put it into production. Only 
one attendee (of a few hundred) had out- 
sourced that change. 

Another advantage, suggested Behlen- 
dorf, is that enterprises may 
gain more than code. "It 
becomes an educating pro- 
cess in more than the soft- 
ware," he said, such as help- 
ing developers figure out 
the right way — or at least 
another way — to do change 
management. 

Bringing open-source 
solutions into the firm can be 
a gradual process, said 
Millinkovich. First, managers 
should work with the compa- 
ny's legal department "to 
establish a framework where- 
by developers can post to 
lists, such as to ask a question or report a 
bug." This may require a few go-rounds 
with company lawyers before an under- 
standing is reached, he said, but it makes 
developers feel that it's safer to participate. 
One option that won't work — but 
which your lawyer may suggest — is to 
shield the identity of developers who 
contribute to a project. That won't fly, 
said Millinkovich, because "we have to 
validate the provenance of every line of 
code." It simply can't be kept secret. 

However, depending on the code 
your developers work on, there may be 
more or less visibility. Apache has a 
"community over code" philosophy, for 
example, pointed out Millinkovich, 
while in the Eclipse community, "we 
wrestle with it all the time." For exam- 
ple, one open-source project may 
encourage contributors to write with 
their "work" e-mail ID, and others have 
more anonymity in discussion forums. 

To establish a culture of open source 
in a company that is traditionally reliant 
on closed source, recommended the 
panelists, look for pilot projects with 
developers who sit in different locations. 
That will encourage the enterprise to 
learn to use the "electronic conversa- 
tions" and move them into a more col- 
laborative environment. I 



Esther Schindler has been writing about 
technology and software development 
topics since 1992. 
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Maestro 1.1 Build System 
Adds NetBeans, Eclipse 



BY ALEX HANDY 

Mergere, an open-source company 
funded by Simula Labs, is taking aim at 
the build process with its new version of 
Maestro. This Maven-based build man- 
agement system reached version 1.1 in 
early October, with new IDE plug-ins 
for NetBeans and Eclipse, as well as 
new UI and management tweaks to 
improve ease of use. 

Dave Schwartz, general manager of 
Mergere, said that his company is 
building on the simplified build 
automation process that Maven intro- 
duced. His company's build manage- 
ment system includes a Web-based 
management system for viewing Maven 
processes and metadata stored in the 
artifact repository. Maestro installations 



are priced per server at US$10,000. 

The tool consists of two pieces: a 
server-side repository that manages all 
the various binary artifacts that are gen- 
erated during a project, and a develop- 
er client for interfacing with the repos- 
itory and build aspects of the tool. 
Schwartz said that the new plug-ins 
give developers the ability to fire off the 
Maven build process without leaving 
the Java IDEs. 

"The hardest part for migrating is 
usually someone has a file that's checked 
in with their source code, and they don't 
know what version that is," said Schultz. 
Maestro keeps track of these support 
files, and can identify the various ver- 
sions used in a development environ- 
ment, explained Schultz. I 
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< continued from page 8 

with larger codebases than previous ver- 
sions. The next version, ANTS Profiler 3.0, 
is planned for release in mid-2007 . . . 6th 
Sense Analytics has released an update to 

kits namesake 
"' 6™ SENSE software-as-a- 
service for col- 
lecting software development data and 
metrics aggregation. Version 2.0 extends 
the service's reach into the maintenance 
phase of the development cycle. It sup- 
ports Eclipse, Emacs and Microsoft Visual 
Studio. The service remains available in a 
free, stand-alone Personal Edition and a 
for-charge Team Edition that allows met- 
rics aggregation for an annual cost of 
US$960 per user . . . McCabe Software has 
released McCabe CM with full support for 
IBM PowerLinux on the Z-Series main- 
frame, enabling such mainframe attributes 
as performance, scalability and reliability 
to be applied to enterprisewide configura- 
tion management. Critical servers can be 
consolidated and maintained in the securi- 
ty and reliability of the IBM PowerLinux 
environment, taking advantage of seam- 
less disaster recovery, dedicated I/O pro- 
cessing and integrity checking . . . Python 
2.5 was released in September, incorporat- 
ing an estimated 350 patches and 450 bug 
fixes against Python 2.4, according to the 
project's Web site. Performance improve- 
ments are claimed in the areas of excep- 
tion handling and string operations, and 
the compiler now produces an abstract 
syntax tree as an intermediate step before 
generating the bytecode. Python struc- 
tures that were limited to 2 A 32 objects 
now support up to 2 A 64, through use of 
the Ji Py_ssize_t" type . . . Toronto-based 
Lucid Models Software has released an 



update to its VR visual reguirements tool. 
Version 1.4.4 helps keep reguirements 
organized through the use of structures. 
Users can define use cases visually and 
create linked diagrams to make reguire- 
ments navigable . . . Oracle has announced 
the general availability of the Content 
Database and Records Database options 
for Oracle Database lOg Enterprise Edi- 
tion, each priced at US$50,000 per 
processor. As part of Oracle's content man- 
agement offering, the Content Database 
allows organizations to consolidate 
unstructured content, while Records Data- 
base manages the retention and disposi- 
tion phases . . . Integration solutions 
provider NetManage has updated its 
OnWeb legacy-to-Web tool and Librados, 
its environment for building JCA and .NET 
adapters. OnWeb 7.2.4 now integrates with 
Eclipse, and includes a fast configuration 
tool for building Web interfaces. Librados 
now plugs into Eclipse, supports JRE and 
JDK version 1.5, and is in sync with the lat- 
est versions of Oracle E-Business apps, 
SAP and Siebel. The tool also can now 
browse business methods using a GUI 
. . . Paradigma Software has made avail- 
able Valentina Studio 2.4.2, a database 
modeling tool that now includes a visual 
SQL query builder plug-in for use with 
Valentina databases. 



PEOPLE 



Web application security software provider 
SPI Dynamics has named Michael Sutton 
to the new position of security evangelist. 
Sutton will work to educate and inform 
security professionals and developers 
about best practices for securing software, 
and will help the company's SPI Labs team 
identify emerging issues and trends in Web 
application security. I 
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Mercury Bolsters SOA Testing 



< continued from page 1 

seeing an upturn in business 
caused by the Mercury acquisi- 
tion, he replied, "In a word, yes." 
Hebner and his team have 
rolled out a program aimed at 
migrating customers from Mer- 



cury's software onto their Ratio- 
nal equivalents. The program 
includes workshops and techni- 
cal discussions hosted by IBM 
staffers around the country, 
coupled with Web seminars and 
white papers. 



Expirix has also seen an 
uptick in interest since the acqui- 
sition announcement, according 
to Dan Koloski, director of strat- 
egy and business development 
for Empirix. While he wouldn't 
cite actual revenue increases 



from the acquisition, he stated 
that Empirix will be showing 
monetary results from this 
increased business over the next 
two quarters. 

"The luster has come off of 
Mercury over the past couple of 
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years," said Koloski, "and we 
have picked up more and more 
business from customers who 
are looking for alternatives. That 
trend was greatly accelerated by 
the pending acquisition by HP. 
The level of noise around it — 
that is, our in-bound traffic — has 
increased quite a bit since July." 

Empirix focuses more on the 
testing of dynamic Web services 
and sites, and Koloski said that 
his customers aren't shy about 
explaining their new interest in 
Empirix. The primary reason 
they've cited: HP Services. 
"What we have seen with 
respect to the acquisition," said 
Koloski, "[is] now many part- 
ners and vendors are faced with 
working with a company who 
will be a competitor. This is a 
fun time right now. HP Services 
competes with almost everyone 
in some way or another." 

Thus, Empirix, too, has 
rolled out a new set of pro- 
grams to help companies con- 
vert their testing environments 
away from Mercury. The pro- 
gram is less hands-on than the 
more cash-heavy IBM: Empirix 
is seeking to consult one-on- 
one with its customers, and 
offers consulting services that 
can convert some Mercury tests 
to Empirix tests. The program 
also includes white papers and 
technical support for compa- 
nies willing to make the switch. 

But while Empirix and IBM 
go after Mercury's customers, 
Mercury looks forward. Mer- 
cury's chief marketing officer, 
Christopher Lochhead, insisted 
that the acquisition is a great 
move for both companies. He 
boasted that the complete soft- 
ware offerings of the combined 
companies are unrivaled else- 
where in the industry, and that 
HP's newly rounded SOA play 
will be a major asset for the 
company moving forward. 

STRATEGY UNCHANGED 

"What HP brought to the table 
on the operations side was real 
user monitoring of SOA. These 
folks are incredibly serious about 
SOA," said Lochhead. "This is 
the largest acquisition the com- 
pany's done since Compaq. They 
paid a 40 percent premium over 
the average stock price. It hasn't 
changed our strategy in SOA at 
all. What it has changed is, we 
are on the verge of becoming 
part of the largest tech company 
in the world. The combination of 
HP software and Mercury will 
be by far the largest business 
technology optimization compa- 
ny in the world." I 
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Taking the Rational Out of RUP 



< continued from page 1 

share a common goal of stream- 
lining software development 
and moving agile practices in 
the mainstream. "RUP was a 
huge monster," said Jacobson. It 
encompassed hundreds and 
hundreds of pages of best prac- 
tices advice, he said. "But most 
people didn't read all of it." 

Another thing that differen- 
tiates EssUP and OpenUP 
from RUP is that neither was 
designed with a single software 
development platform in 
mind. "EssUP is totally inde- 
pendent of an IDE and can be 
used without any tools," said 
Jacobson. The Team System 
implementation of EssUP was 
written by Mumbai, India- 
based Tata Consultancy Ser- 
vices. An Eclipse implementa- 
tion, designed by another 
company, not yet named, will 
follow next year, he said. 

To date, OpenUP has not 
been implemented in Eclipse 
or any other development envi- 
ronments, said Kroll. 

COMPOSING A PROCESS 

EPF Composer lets managers 
create their own development 
processes, said Kroll, pulling 
in best practices advice from 
OpenUP. "You can author 
anything on Composer. It's 
process-neutral." 

The ability to pick and choose 
pieces of different approaches 
accurately reflects how develop- 
ment managers think about 
process frameworks today, 
according to Kroll. "I don't know 
anyone doing 100 percent 
Extreme Programming," he said, 
referring to a popular agile 
development process. "That's 
not how people are doing it." 
Instead, they take a little bit of 
this, a little bit of that and bring 
them together, he said. 

OpenUP is essentially a col- 
lection of best practices from a 
range of sources, not just IBM. 
It includes contributions, such 
as checklists that offer advice 
on structuring a development 
process for different types of 
projects, from consulting firms 
BearingPoint and Capgemini, 
as well as contributions from 
the European Software Insti- 
tute, Samsung, Telelogic and 
the University of British 
Columbia, noted Kroll. "We 
can share content on how a 
small team does [Java EE] 
development, or how a large 



team manages [an] SOA effort," 
he said, offering examples. 

OpenUP will also include 
contributions from EssUP, noted 
Jacobson. EssUP is structured 
around practices. That includes 



activities such as writing user sto- 
ries, test-driven design and 
refactoring. It also includes prac- 
tices that deal with iteration and 
process management, and pulls 
ideas from the process improve- 



ment methodology CM MI. 

"The interesting idea with 
practices is that you can teach, 
adopt, apply, change [or] 
replace one practice at a time. 
For instance, we can now 



replace the Iteration practice 
with a Scrum practice but keep 
all the other practices in 
EssUP," he said. "We have cus- 
tomers that want to do that." 

The ability to maintain that 
flexibility is key, added Kroll. 
"It will help move agile devel- 
opment into the mainstream," 
he said. I 
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IBM's alphaWorks: Ten Years of Emerging Technology 



< continued from page 1 

and emerging tech demos. 

Bearing in mind that nearly 
all alphaWorks projects were 
akin to alpha-level products — 
that is, not ready for prime time 



like those on IBM's developer- 
Works site — the portal is a suc- 
cess. As the project reaches the 
decade mark, the site now hosts 
the first round of IBM s poten- 
tial software-as-a-service offer- 



ings, under the alphaWorks 
Services name. 

Marc Goubert is the manag- 
er of IBM's alphaWorks. He's 
been there since 1997, when the 
project was up and running. "I 



think that [alphaWorks] can be 
seen as both a benefit of change 
that is happening at IBM, as well 
as an instigator for that change," 
Goubert said. He cited the fact 
that IBM's first foray into offer- 
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ing its code to the open-source 
community came from an alpha- 
Works project, and that the 
practice has since spread 
throughout the company. 

Goubert started by working 
on the underlying infrastructure 
of alphaWorks. That Web site has 
again been worked over for its 
10th anniversary and has added 
new projects, such as Deep 
Thunder, a customizable weather 
forecasting service that offers a 
data stream of up-to-the-minute 
weather patterns so businesses 
can plan for events that might 
hurt sales, service or delivery. 

But not every alphaWorks 
project is business-ready Gou- 
bert said that the wackiest thing 
to come out of the site was 
called Robocode. 

"It was a project made by an 
IBMer in his spare time. He 
created this project that would 
allow a novice programmer to 
create, through Java interfaces, 
a robot that would battle with 
other robots in an online are- 
na," said Goubert. 

Other projects at alpha- 
Works have laid the corner- 
stones of entire infrastructures. 
"I think a great example is the 
XML parser," said Goubert. "It 
was originally done by the team 
in Tokyo in 1997 and 1998. Back 
then, people didn't quite know 
how to deal with XML. The 
parser for Java actually launched 
at the same time the XML spec 
was approved by the W3C. We 
came out with not only the first 
parser, but it adhered to the 
standards completely. We even- 
tually open-sourced it and 
donated it to Apache, where it's 
now known as Xerces." 

BREAKING WITH CONVENTION 

During a time when the conven- 
tional wisdom was to hide all 
research and development from 
prying eyes, alphaWorks broke 
the mold. "The idea hasn't been 
[that] we take our intellectual 
property and hold onto it and 
make sure nobody steals our 
ideas," said Goubert. "The side 
effect solves the problem of how 
do we take that tech and ensure 
that other IBMers around the 
world know about this and add 
their own input? The approach 
that IBM has taken with alpha- 
Works — to open up our technol- 
ogy in the labs — has increased 
the quality and the efficiency of 
our products by allowing that col- 
laboration to come back to us." I 
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Embedded .N ET 
Closer to Reality 

Framework for embedded devices grew 
out of MSN Direct's Smart Watches 



BY P.J. CONNOLLY 

Microsoft's embedded efforts hit a mile- 
stone last month at the Embedded Sys- 
tems Conference in Boston, with the 
release of a beta for the .NET Micro 
Framework. The framework offers a 
managed code environment and Visual 
Studio integration to embedded devel- 
opers; it uses Windows Presentation 
Foundation to support user interface 
design and development. 

Although Microsoft has used the 
.NET Micro Framework for internal pro- 
jects such as MSN Directs Smart Watch- 
es, the new beta is the company's first 
broad exposure of the environment to 
outside developers. The framework is the 
latest incarnation of Microsoft's Smart 
Personal Objects Technology (SPOT). 
SPOT devices don't require all of the fea- 
tures of Windows CE, but still run rich 
graphical applications on inexpensive and 
power-constrained hardware. The .NET 
Micro Framework is not a real-time envi- 
ronment, unlike Windows CE. 

Microsoft touts the advantages of 
writing embedded applications with 
managed code as a great productivity 
enhancer. An anecdotal report on the 
project Web site (aboutnetmf.com) 
claims a four-time improvement when 
coding switched from C++ to C#, with 
the credit divided between the inherent 
advantages of managed code and the 
Visual Studio IDE. 

Products based on the .NET Micro 



Framework are expected in a matter 
of months from companies including 
ControlThink, Digi International, Em- 
beddedFusion, Freescale, SJJ Em- 
bedded MicroSolutions and Winbond 
Electronics. I 

Sun, Laszlo Working 
To Bring AJAX to ME 

BY ALEX HANDY 

Laszlo Systems and Sun Microsystems 
are working together to bring the rich- 
ness of AJAX-based Web applications 
onto the Java Micro Edition platform. 

The quest to add Java ME compila- 
tion capability to OpenLaszlo has been 
dubbed Project Orbit, and the two com- 
panies anticipate that a working demo of 
the tool will be available by the begin- 
ning of 2007. The project is ultimately 
aimed at bringing Laszlo-style interfaces 
into a form that can be digested on the 
Java ME platform. 

The idea, said Jim Grandy, director 
of OpenLaszlo, is for developers to have 
multiple distribution options for their 
software. The addition of Java ME to 
the mix will bring more than 1 billion 
Java-enabled devices into the realm of 
Laszlo compatibility. Grandy said that 
the refactoring of OpenLaszlo should 
result in other such announcements lat- 
er next year. I 



In Mobile Devices, Less Is More 

Mobilinux aims to cut footprint, power use 



BY P.J. CONNOLLY 

Linux as a handset platform took anoth- 
er stride forward at the end of Septem- 
ber, when MontaVista Software released 
a new version of its Mobilinux operating 
system and development environment 
for mobile devices. Mobilinux 4.1 incor- 
porates a number of changes designed 
to reduce the memory footprint in both 
flash memory and RAM, while conserv- 
ing precious battery power. 

The new version includes the Squashfs 
filesystem, increasing the capacity of 
read-only persistent storage on a device 
through compression. Mobilinux 4.1 
offers developers the uClibc C standard 
library for developing robust applications 
in C and C++ without the overhead of the 
massive GNU C library, glibc. 

The DirectFB library, which allows 



developers to write to the Linux frame- 
buffer HAL instead of the X window sys- 
tem, is also included with the new Mobi- 
linux. MontaVista claims this approach is 
more reliable and stable than other meth- 
ods, and points to a smaller memory foot- 
print for applications created for its envi- 
ronment compared with XI 1 applications. 
Mobilinux 4.1 also offers power con- 
sumption and management improve- 
ments, including a platform-independent, 
dynamic power management library, and 
type-based memory allocation, and vari- 
able scheduling timeouts. It uses 
advanced RTOS support to allow the use 
of mass-market, single-chip devices. 
Included with Mobilinux are MontaVista's 
Eclipse-based DevRocket development 
tools, which run on Microsoft Windows as 
well as Red Hat and SUSE Linux. I 
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Unique search technologies make Entier well suited for mobile apps, according to Hitachi. 

Hitachi Releases RDBMS 
For Embedded Devices 

Entier to help build location-based services, 
offers incremental text searching for performance 



BY P.J. CONNOLLY 

Hitachi may not be the first name that 
comes to mind in databases — at least 
not in North America or Europe. But 
the company intends to take advantage 
of its near-score years of experience 
in the Japanese market with the 
HiRDB relational database, to make a 
splash in the small pool of databases 
designed for embedded devices with 
the Entier RDBMS. 

After a year of production use with a 
Japanese customer and two months of 
beta testing over the summer, Hitachi 
announced Entier's immediate avail- 
ability for the North American market 
at September's Embedded Systems 
Conference in Boston. At the same 
time, Hitachi released an SDK for 
Entier that runs on Microsoft's Win- 
dows systems. 

Malcolm Colton, vice president of 
sales and marketing in the embedded 
systems group for Hitachi America, 
explained that Hitachi's engineers were 
wondering what to do next with 
HiRDB. "About three years ago, they 
realized that the devices were getting 
powerful enough that it was going to 
make sense, very soon, to put a data- 
base on them," he observed, "for the 
same reasons that you run a database in 
the enterprise." 

Hitachi is positioning Entier as 
uniquely suited for mobile and set-top 
applications due to two unique search 
technologies as well as superior perfor- 
mance. According to the company, the 



Entier RDBMS performs along a flat 
curve regardless of database size or 
rows returned. 

Entier offers incremental text 
search, which progressively refines 
search results with each keystroke; it 
then guides the end user through pos- 
sible next letters in the search term. 
This feature can be particularly useful 
when searching for entries by name or 
other keyword, such as when configur- 
ing a DVR to record programs as they 
become available. 

The other advantage Hitachi plays 
up in its pitch for Entier is the ability 
to search spatial data using a SQL 
query, enabling the delivery of loca- 
tion-based services to a variety of 
mobile devices, from smart phones 
to navigation systems with efficient 
R-Tree indexing. Searches can run 
by proximity to a circle, polygon or 
route, as defined by the developer. 
The spatial search features also allow 
the use of conceptual media searches, 
by relationships along multidimension- 
al axes. 

Entier runs in less than a megabyte 
of memory, Hitachi claims; the POSIX 
and FAT32-compatible file system 
takes up a mere 90KB and supports 
both flash memory and disks. 

The file system incorporates fault- 
tolerance features including data 
duplication and a rollback journal, pre- 
serving data even in the event of com- 
plete power failure, as the database 
resides in persistent storage. I 
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Checked in" tells you nothing. \ 

Your configuration management tool I 
should tell you more. J 
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Seapine 

Surround SCM 5 

Software Configuration Management 

New Surround SCM 5.0 with change automation and 
custom metadata gives you more control over your software 
change process and a clearer view of the state of files. 

Know whether a file you are including in the build has been 
code reviewed. Ensure design documents have been through 
the review process. Control who can make changes to files 
after they have been approved. 

Surround SCM 5.0's virtual branches and collaboration 
features help streamline parallel development. There's never 
been a better time to change to Surround SCM. The next 
evolution in SCM. 



Create workflows to ensure changes to files 
follow your processes. 

See beyond "Checked in" to know the true status 
of files in the change process. 

Automate the development process with powerful 
in-application triggers. 

Improve security with single sign-on support 

Integrate seamlessly with TestTrack and other 
popular development and build tools. 

Streamline communication with automated change 
notifications and flexible reporting. 
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Configuration management 
isn't cool, but some say it's 
undeniably more important 
than ever in a distributed 
services world 



BY GEOFF KOCH 



if ant to have some fun, or 
mjJml at least generate several 
ml weeks' worth of e-mail to 
read? It's easy. Find sev- 
eral smart people steeped in the world 
of software configuration management, 
then ask them the following question. 

Because software development is 
becoming a more agile and process-light 
endeavor, isn't configuration manage- 
ment decidedly less important today than 
it was even a few years ago? After all, the 
glossy business magazines declare that 
edge-generated innovation and services 
are in, while centralized and plod 
ding control is out. And what 
could be more centralized and 
plodding than configuration 
management? 

"The opposite is true," said 
Steve Berczuk, co-author of 
the 2002 book "Software Con- 
figuration Management Pat- 
terns: Effective Teamwork, 
Practical Integration" and 
senior software engineer at 
Fast Search & Transfer in 
Needham, Mass. "With more 
going on, it's more important to be able 
to understand dependencies, track 
changes and coordinate." 

Suffice it to say that Berczuk and 
most of his peers seem unconcerned 
about any pending obsolescence. And 




after some amount of indignation at 
that suggestion passes, most of them 
can cite a plausible laundry list of rea- 
sons why configuration management 
matters more than ever. 

One is the inexorable rise of standards 
and regulations. Another is the push 
toward geographically distributed devel- 
opment, which if anything fuels the trend 
toward consolidation, centralization and 
more integrated soup-to-nuts-type man- 
agement software. The rise of Web ser- 
vices and service-oriented architectures, 
or SOAs, may in fact create new 



4 [CM] is going to remai: 
just as important, but 
it's going to become 
easier to do because c 
general acceptance and 
also advances in tools 
to support it. 7 

— Robert Cowham, principal 
consultant, Vaccaperna Systems 



issues. But such tech- 
nologies won't necessarily solve any of the 
old configuration management problems, 
nearly all of which require competent use 
of a handful of well-known tools. 

Yet it's wrong to consider configura- 
tion managers to be tool freaks who nev- 



er met a check-in/check-out sys- 
tem they didn't like. After strenuously 
pointing out that some sort of tool is 
essential to nearly every project, most 
developers working in this space will 
emphasize that people and processes 
matter far more than software programs 
in managing a codebase. 





RULES AND REGULATIONS 

More than a few programmers probably 
chose software development as a career 
because they wanted to avoid 
painfully dull subjects like 
securities law and process 
engineering — both of which 
are relevant to software like 
never before. 

The Sarbanes-Oxley Act 
of 2002, or SOX, requires 
IT managers to have proper 
I controls in place when 
I making changes to software 
I that plays a significant role 
| in financial reporting. 
Unfortunately, this provi- 
sion is interpreted broadly. And since 
software increasingly is the DNA of 
most businesses, nearly any application 
can be seen as having some connection 
to a company's financial health. 

Also on the rise are various industry 
regulations related to corporate opera- 



tional health. One example is the ISO 
20000 standard— it's aligned with the IT 
Infrastructure Library, or ITIL, stan- 
dard — that aims to be the new interna- 
tional standard for IT service manage- 
ment. Another is Capability Maturity 
Model Integration, or CMMI, an 
increasingly popular process improve- 
ment approach that sprang from the 
Software Engineering Institute at 
Carnegie Mellon University. 

"I think configuration management is 
going to remain just as important, but it's 
going to become easier to do because of 
general acceptance and also advances in 
tools to support it," said Robert 
Cowham, principal consultant with Vac- 
caperna Systems in London. "Things 
like SOX and other corporate gover- 
nance initiatives are a help. Also ITIL, 
now ISO 20000, has done a lot to raise 
the profile, as has CMMI. Traceability is 
becoming more important." 

Cowham currently is reviewing the 
collection of software used by a large 
financial services company. One major 
outsourced piece of this collection has 
suffered from lack of investment in con- 
figuration management over the years. 
The vendor has been using totally differ- 
continued on page 34 ► 
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ent processes to maintain this particular 
component, Cowham said. 

But Cowham s client now is including 
new requirements that all vendors use 
certain ITIL principles and achieve min- 
imum CM MI levels in their contracts. As 
a result, he said, the financial services 
company's third-party software providers 
may have to think about hooking togeth- 
er ITIL and CMMI. 

"This will be the key to delivering a 
service from initiation through to live 
support for many years," Cowham said. 
"Taking the service view is a challenge 
for many people involved in what they 
see as pure development, which finishes 
when the project delivers." 

FAILURE TO COMMUNICATE 

Another development challenge today is 
coordinating geographically distributed 
teams that practice around-the-clock, 
follow-the-sun development. Despite 
tools ranging from IM to Skype, mis- 
communication remains a potentially 
costly issue, especially when working 
across cultures. 

And no technology can erase the fun- 
damentally asynchronous nature of such 
work. That is, when the sun is up in Sun- 
nyvale, Calif., the developers back in 



Bangalore, India, who worked on the 
code the 12 hours ago are now fast asleep. 

Berczuk, who occasionally consults for 
teams with members in different coun- 
tries, also sees distributed development 
as driving the need for better configura- 
tion management. A practitioner of agile 
processes and Scrummaster, he uses a 
continuous integration tool such as 
CruiseControl and follows practices 
such as unit testing in an effort to 
boost the speed and efficiency of 
such teams' work. 

"The version control history is the 
key to understanding what happens 
when a test breaks," Berczuk said. 
"Trying to be agile and develop code 
quickly from a number of cities can 
make things pretty complex." 

More work done across time 
zones is one reason behind cen- 
tralization and integration, other 
important trends in configuration man- 
agement. Other reasons include the 
need to mitigate complexity and com- 
bat server sprawl. 

For Mario Moreira, director of tech- 
nology at a large Boston-based financial 
services company, centralized environ- 
ments are among the two or three big 
configuration management trends today. 

"Organizations want to reduce overall 
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costs," said Moreira, author of the 2004 
book "Software Configuration Manage- 
ment Implementation Roadmap" and 
regular columnist at CM Crossroads. 
"This includes consolidating on less 
hardware, sharing licenses and using 
fewer personnel to support more users." 
Configuration management tools also 




'With more going 
on, it's more 
important to be 
able to understand 
dependencies, 
track changes and 
coordinate. 7 

— Steve Berczuk, senior 

software engineer, Fast Search 

& Transfer 

appear to be 

moving well beyond their source- and 
version-control roots. New features han- 
dle branching and merging, build man- 
agement, defect tracking and deploy- 
ment — either built into a broad solution 
or through integrations with other com- 
plementary software. 

The new push for integration helps 
engineers such as Michael Sayko, a soft- 
ware configuration management consul- 
tant in Austin, Texas, whose clients fre- 
quently ask him, "What's in the build?" 

Said Sayko: "Those who ask this 
question are looking for a description of 
the changes, such as a new feature or 
defect fix, and not simply the version 
numbers of source code files." 



dozen open-source and commercial titles. 
"There appears to be a lot of new 
configuration management tool ven- 
dors," said Moreira. "It's hard to keep up 
with them." 

Among the vendors jockeying for 
position in this space are AccuRev, Bor- 
land Software, CA, IBM Rational, 
MKS, Perforce, Seapine Software, Ser- 
ena Software and Telelogic. 
From the build side, Build- 
Forge, Catalyst Systems and 
Electric Cloud all have solu- 
tions that extend into what 
they're calling production 
management systems. 

The existence of viable 
open-source tools also hints at 
the general health and well- 
being of the configuration 
management industry. Subver- 
sion and Concurrent Version 
System, better known as CVS, 
are among the more popular open- 
source version control tools, which lack 
many of the other features that more 




YEAH, BUT THE PAY'S GOOD 

Several other indicators suggest that 
configuration management is not simply 
an obscure corner of the software world. 

Jobs in the field continue to com- 
mand good salaries. Being a software 
engineer is the best job in America, 
according to a survey published by Mon- 
ey magazine and Salary.com. The survey 
calls out release engineers, a category 
that includes configuration management 
specialists, as the top-paying software- 
related job. 

"Job postings for configuration man- 
agers and build engineers seem to be 
more sophisticated than they were sev- 
eral years ago," said Sayko. "Many post- 
ings mention the need to develop or 
support branching strategies for parallel 
development." 

Employers also seek engineers who 
can support the integration between 
version control and change manage- 
ment, Sayko added. For example, the 
engineer may need to maintain the 
workflow model used by the change 
management tool. 

In addition, competition in the field 
remains vibrant. Wikipedia's page devoted 
to revision control software includes a few 



and more are becoming part of a full 
configuration management tool suite. 

"I like the open-source configuration 
management tools better because there 
are more tips on how to do things," said 
Jeanne Boyarsky, a New York City-based 
Java developer at a large bank. "I find it 
easier to create custom reports, and 
there are more books on the open- 
source tools. Beyond that, I don't feel a 
need for the extra features that the com- 
mercial tools offer." 

Configuration management-related 
innovation is coming down the open- 
source pike, as well. Several developers 
expressed their hopes for the Eclipse 
Application Lifecycle Framework, or 
ALF, project. Led by Kevin Parker of 
Serena, the project is working on a 
framework that allows different tools to 
integrate without having to develop cus- 
tom APIs. Despite the central impor- 
tance of configuration management to 
development projects today, the ques- 
tion of how to deal with the general rise 
of services does loom on the horizon. 

Even federal government IT man- 
agers, presumably far from technology's 
bleeding edge, now are showing an 
affinity for service-oriented architec- 
tures, roughly defined as architecture 
built around a collection of network- 
based services. 

More than half of such managers rec- 
ognize the need to address inter- and 
intra- agency integration as an SOA 
driver, according to a recent survey by 
the Merlin Federal SOA Coalition. And 
among those who've been through an 
SOA implementation, 75 percent would 
recommend that other agencies adopt 
an SOA approach. 

"Configuration management is more 
continued on page 36 ► 
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important when it comes to SOA," said 
Jason Bloomberg, senior analyst with 
ZapThink. 

Supporting SOA is about handling 
configurations of various loosely coupled 
bits of software, Bloomberg said. Such 
configurations increasingly reflect 
nuanced business logic instead of just 
dumb functionality And several configu- 
ration issues crop up when offering a 
new service. 

"You have to put the service together, 
register it, deploy it, access it, bind to it, 
version it and deal with various policies 
and governance," said Bloomberg. 

Several companies tracked by Zap- 
Think help to keep things straight when 
it comes to services, including Flashline 
(recently acquired by BE A Systems), 
Infravio (recently acquired by web- 
Methods), Layer 7 Technologies, Logic- 
Library and Systinet. Most of these com- 
panies tout their ability to do service 
life-cycle management, asset manage- 
ment or SOA governance. They might 
not use the term "configuration manage- 
ment," but that's really what they're talk- 
ing about, Bloomberg said. 

But this new rise of services doesn't 
necessarily displace old configuration 
management problems. All the code 



related to end-user applications, data- 
bases, middleware, operating systems, 
network management and so on is still 
around. 

"You still have to manage all that 
stuff, but now we also have to manage 
configuration of the services," said 
Bloomberg. "It's a new configu- 
ration problem that goes on top 
of the old one that's still around." 

A FOOL WITH A TOOL 

Another old configuration man- 
agement problem is getting lost in 
hairsplitting discussions about 
features and benefits of various 
tools while ignoring more funda- 
mental issues about the people 
working on the coding project. 

"As the saying goes, 'A fool with a tool 
is still a fool,' " said Brad Appleton, soft- 
ware engineer for Motorola and co- 
author of "Software Configuration Man- 
agement Patterns" with Berczuk. "There 
are lots of people out there with the best 
tools around who are falling all over 
themselves because they still don't really 
know what good configuration practices 
and process are or how to achieve them." 

For Appleton, good practices include 
writing patterns, documents that 
describe context- and situation-specific 



solutions to configuration management 
problems. Using wikis is one way to 
share and disseminate these patterns. 
Sharing also is facilitated by rotating 
people across various teams and depart- 
ments within a company in an attempt 
to build like-minded 





'Configuration 
management is 
more important 
when it comes 
to SOA. 7 

— Jason Bloomberg, senior 
analyst, ZapThink 



com- 
munities of practice — something that 
only works, Appleton said, "if the place 
they rotate to is open and accepting of 
the knowledge they have to share." 

German developer Ilja Preuss accepts 
that configuration management is an 
essential part of the development process. 
Preuss, who co-wrote the 2005 book 
"Softwaretests mit JUnit," won't start any 
coding project, however small, without 
using some version control system. He 
even uses Subversion to store work-in- 
process documents and presentations. 

Yet, like many of his peers, Preuss, 



who's also a proponent of agile processes, 
is not one to cram a tool or process down 
his team's throat. Successful configura- 
tion management is "even more about 
team members deciding how to collabo- 
rate on a day-to-day basis than about 
process," he said. "It's no coinci- 
dence that the first line of the Agile 
Manifesto states that we value indi- 
viduals and their interactions over 
processes and tools.' " 

Indeed, after reading the 
thoughtful yet lengthy responses of 
Preuss and many of his colleagues, 
I at least one conclusion is reason- 
able: Configuration management, 
however dull and rules-based it's 
seen to be in the eyes of the wider soft- 
ware world, remains an undeniably valu- 
able part of development. 

What about those glossy business 
magazines and talk of a new wave of 
nimble programming practices to sup- 
port sexy Web 2.0 technologies? 

"Heck, 40 to 50 percent of software 
engineering is maintaining legacy prod- 
ucts," said Moreira, who has weathered 
much hype in two decades doing con- 
figuration management work. "These 
legacy projects, in particular, will 
always require rock solid configuration 
management." I 
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Electric Cloud 

In today's application development life cycle, the build process 
often takes too long, eating up time and effort that could and should 
be used in other areas of development. This problem is especially 
evident in the ISV and embedded software markets. Speed the build 
process and you've expedited nearly every aspect of getting prod- 
uct to market. If speed is what you need, Electric Cloud— named to 
the 2006 SD Times 100 for Build Management-can help. 

"There are three things that we do to help developers in the appli- 
cation life cycle," says Mike Maciag, CEO of Electric Cloud. "First, 
we have an overall impact on developer productivity and time to 
market. Second, we have a dramatic impact on the quality of the 
resulting product. Third, we allow developers to use 
&m rapid development methodologies. The way that 
we do these things is that we eliminate the bot- 
tleneck in the software development life cycle that 
revolves around software builds or compiles." 
Electric Cloud's ElectricAccelerator solution slashes build 
times by 10 to 20 times, by allowing compiles to be done 
on massive clusters of inexpensive hardware. Meanwhile, 
Electriclnsight takes the build out of the "black box" to allow 
software developers and engineers to know exactly what's 
j& happening in their compile via a powerful, yet intuitive, 
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SDTimesI 



2006 



100 



Electric Cloud solutions fit into any organiza- 
tion and process. Coders can compile using gmake, Nmake or 
Visual Studio, with Electric Cloud's systems seamlessly plugged 
into the existing tools. "Our products understand the dependen- 
cies among the hundreds of thousands of files in a build. This 
allows us to automatically detect and correct for any conflicts 
in a parallel build and make sure you never run into the prob- 
lem again," Maciag explains. 

Electric Cloud has so much insight into streamlining the devel- 
opment cycle because its own staff are experienced developers— who 
focus on accelerating the development life cycle because they too 
have felt the pain they are attempting to resolve in the marketplace. 

"That's a philosophy that differentiates us and that we think 
about all the time," Maciag explains. "We add value without chang- 
ing the way that people have to work. The way I look at it is 
that there are lots of tools out there that say they are the equiv- 
alent of, 'We can make you a much more articulate person.. .as 
long as you learn how to speak French first.' We're saying that we 
can make your team more productive in your own language. You 
don't have to do things in a different way." With Electric Cloud, 
you simply do them better. For more information call 650.962.4777 
or email sales@electric-cloud.com. 
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FROM THE EDITORS 

The Third Way 

For the past half-dozen years, the conventional wisdom is that new 
client/server or n -tiered applications are written using one of the 
major app-server platforms. Recently, the choices have become Java EE 
or .NET, though of course many back-end systems are still written using 
C++ running atop Linux, Unix or Windows. 

Essentially, though, it's Java EE or .NET. That's been the choice. But 
neither is perfect. 

Java EE (for many years known as J2EE) has been plagued by criti- 
cism that it's too complex. The myriad specifications developed by the 
Java Community Process make the solution stack unwieldy at best, and 
downright perplexing at worst. While the latest version of the platform, 
known as Java EE 5, makes some strides in reducing the complexity, it 
doesn't go far enough. Plain Old Java Objects are good, and so is the new 
Metadata Facility for the Java Language. But unless you're tackling a 
very big project, Java EE is too heavy for the job. 

Microsoft's .NET suffers from its own challenges. One, of course, is 
that it's based on a single solution stack. It's also less mature than Java 
EE, and while ASPNET-based development is simpler, and the integra- 
tion with Visual Studio is unparalleled, programming huge applications 
using C# and .NET is also daunting. 

There's a third way that's rapidly becoming viable for the enterprise: 
the use of agile languages, such as Ruby, Perl and PHP, and server-side 
frameworks, such as Rails. Once, the languages were considered little 
more than lightweight tools for adding simple logic to individual Web 
pages. Today, they represent a rich application development approach, 
fully capable of thriving inside the enterprise. 

What's more, thanks to SOA, Web services and integration with stan- 
dard application servers, these scripting languages and frameworks are 
now able to interoperate with the traditional tools of enterprise software 
development. One might think of these languages as serving as functional 
subsets of Java EE — just as XML and HTML are subsets of SGML. We 
expect many enterprises to adopt this third way, not only as an adjunct to 
Java EE and .NET, but in many cases as an easier-to-use alternative. 

Development as a Service 

The benefits of using on-demand applications from companies like Sales- 
force.com and Projity are clear: no installation time, no upgrade woes, 
no on-site servers and, potentially, fewer calls to IT from confused users. 

Now, Salesforce.com, WebEx and others are readying more robust 
online development environments for the customization and integration 
of software-as-a-service applications. Will development eventually be 
handled entirely within a Web browser? 

Certainly the Visual Studio, Eclipse, JBuilder and NetBeans faithful 
would question such a move, but for those not tied to an IDE, online 
development could offer some unique benefits. 

If Salesforce. corn's Apex programming language really is as powerful 
as the company claims, developers could say goodbye to repositories, 
version controls and most of their testing tools. 

Look forward 10 years. Who's to say that developers won't be able to 
build all of their projects in such a toolless environment? It's an intrigu- 
ing possibility that offers many benefits and few drawbacks. Chief among 
those drawbacks: network outages that equal complete work stoppage, a 
loss of control over platform upgrades, constant hosting fees, and of 
course being at the complete mercy of the service provider. These dis- 
advantages should not be trivialized. 

But it's a new trend to watch. These days, many developers and enter- 
prise users already do most of their daily tasks in Web browsers. Google 
alone already offers everything needed to run a cubicle from a browser 
(word processor, spreadsheet, calendar, e-mail). Will we see something 
like a gIDE in the coming years? Haggard desktop support technicians 
and diff- addicted telecommuters can only hope. I 



Middleware 2.0 



Most of us are getting tired of seeing 
"2.0" added to just about every- 
thing these days, but sometimes it's the 
best way to describe the next wave. 
That's why I'll use it here to describe 
what's coming for middleware. Don't get 
me wrong: I know how valuable middle- 
ware is, and it will surely be around for a 
very long time. But I really do think tra- 
ditional middleware is in trou- 
ble. More specifically, tradi- 
tional middleware is not 
meeting the needs of forward- 
thinking enterprises that are 
Web-enabling their business 
applications. 



John Crupi 




A DEPOSED KING 

Middleware used to be king, 
but it is now being relegated to 
lower-level tasks. The capabili- 
ties of traditional middleware just aren't 
enough for Web-based computing. The 
next generation of Web computing 
needs new capabilities, and this is caus- 
ing a radical shift in what we think of tra- 
ditional middleware. 

A few years back, Sun Microsystems' 
Jonathan Schwartz famously said, "Mid- 
dleware is dead." The industry shrugged 
off his comments, and IBM's response 
was to place "Middleware is here" bill- 
boards at strategic spots all along Cali- 
fornia's US-101 highway in Silicon Val- 
ley. The reality today is that middleware 
is not dead — far from it. However, it is 
being pushed aside, or in this case 
pushed down. Let me explain. 

Consider this analogy: Java was not 
originally intended for enterprise com- 
puting. Instead, it was designed as a 
client-side programming language. I was 
at Sun when J2EE made its debut. We 
were pleasantly surprised (shocked, real- 
ly) when customers accepted J2EE and 
decided to move their business-critical 
applications to J2EE. Why did this hap- 
pen? Why did enterprises entrust their 
business to such a new and unproven 
technology? 

It had to do a lot with the amount of 
pain it reduced. Specifically, J2EE 
reduced the amount of middleware 
developers had to write and let them 
focus more on writing business applica- 
tions. The J2EE application servers now 
handled all the chores of memory and 
life-cycle management. J2EE became a 
commoditized part of the Web middle- 
ware platform and made a lot of money 
for many people. 

Here we are 10 years later, and a new 
phase is upon us. We've been talking 
about service-oriented architecture for 
years, though not necessarily with the 
SOA acronym, but the concept is mak- 
ing a resurgence and is getting much 
more press lately. Why? Because of 
AJAX. 

It may seem odd that a RIA/browser- 
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based technology has impact on a server- 
based technology such as SOA. But in 
fact it's true, and here's why. SOA has 
arguably done well in the enterprise 
integration space. Since SOA is an inte- 
gration architectural style, it made sense 
to apply it to enterprise integration to 
ease the architectural costs and com- 
plexities of proprietary and peer-to-peer 
integration. 

But now, SOA is increas- 
ingly being viewed as a ser- 
vice provider for Web-based 
applications. AJAX, which 
enhances the user experi- 
ence, is driving the desire to 
connect Web applications 
with SOA services. 

So what does this have to 
do with the trouble facing tra- 
ditional middleware? Enter- 
prise IT departments aren't complaining 
about their middleware not being good 
enough (well maybe they are, but not in 
the context of this article). What is hap- 
pening is that we're seeing an end-around 
by the portal replacements. 

TRADITIONAL PORTALS UNDER SIEGE 

But there's a catch: There's no portal 
server! That's right — traditional portals 
and portal vendors are being threatened 
by "portal-less portals." It usually doesn't 
happen this way. Players in a new cate- 
gory generally start eating away at an 
incumbent, and then it's too late. But, in 
this case, AJAX isn't even a category — 
it's simply a set of technologies. 

Meanwhile, companies are starting to 
make it easy to create consumer portals 
using AJAX, and at the same time these 
new portals provide more flexible user 
interactions and a better user experi- 
ence. We're enjoying all the stuff we had 
with traditional portals and much more, 
and we're getting it without the heavy 
burden of all that portal software. 

The interesting part of this new-por- 
tal-replacing-old-portal play is that we 
probably shouldn't even call it a "new" 
portal. It's actually something very dif- 
ferent, especially in the enterprise. 

Corporate portals have a whole set of 
constraints that consumer portals don't. 
And as a matter of fact, most portal ven- 
dors don't sell to consumer-facing 
providers; they sell to enterprises. Corpo- 
rate portals also don't have the luxury of 
interfacing with "clean" data sources like 
RSS, public Web sites, public blogs, etc. 
Instead, they have to integrate with all the 
stuff behind the corporate firewall that's 
been around for years or even decades. 
That's why a very large integration effort is 
usually required to get even a corporate 
portal up and running. Not only that, cor- 
porate portals attempt to serve as the 
"face" to all corporate information. As you 
can imagine, it is probably more informa- 
tion than you'd ever want or use. 
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The future so-called portal won't even 
look like a portal initially. When a user 
first logs into a corporate portal, it should 
be empty. Yep, that's right — just a blank 
page with only an "Add Content" button. 
That's because it won't be a portal any- 
more. It will be the user's workspace and 
will be activity-driven, allowing the user 
to add and run any application that has 
been exposed and governed by IT. This 
actually has bigger implications, in that 
future business applications will be much 
smaller and driven by business activity. 
This is much more aligned with how a 
user works, and much less aligned with 
how we develop business applications 
today. Instead of applications getting 
larger, IT will begin making applications 
activity-granular (smaller) and design 
them for integration with other applica- 
tions on demand. 

NEW CATEGORY OF MIDDLEWARE 

Of course, this won't happen magically; 
it will require a new set of middleware 
capabilities. Either traditional middle- 
ware provides these capabilities or a new 
category of middleware steps in to do so. 
Simply put, there are three key service 
capabilities required: service consumer 
governance, business activity integration 
and reliable Web connectivity. Service 
consumer governance is responsible for 
governing the exposure of existing ser- 
vices to the application. Don't confuse 
this with service implementation gover- 
nance. The former focuses on governing 
access to the services, not governing the 
actual services. Business activity integra- 
tion provides support for activity-driven 
mash-ups. 

Most talk of mash-ups is about data. 
But users really require integrated data 
based on what they're doing, such as 
searching, communicating or interacting 
with an application. Finally, reliable Web 
connectivity ensures that applications 
run over the Web in a secure and reliable 
way. Consumer applications can usually 
tolerate the unreliable nature of Web 
connectivity, but business applications 
must meet higher standards. Reliable 
Web connectivity leverages the ubiquity 
of the Web while enabling the connectiv- 
ity required by businesses. 

Taken together, these capabilities will 
enable the integration of AJAX and SOA 
to create a whole new class of enterprise 
applications. Optimally, they will be light- 
weight, based on open standards, and 
agnostic to any particular middleware 
vendor. They don't replace traditional 
middleware, but rather run on top of it. 

Still, I think there is a strong possibil- 
ity that these three capabilities will be 
"just enough" for the next generation of 
Web applications and will disrupt tradi- 
tional middleware. That may take a 
while. But then again, with the speed of 
change in everything today, it may not. I 
can't wait for that to happen. I 

John Crupi is CTO of JackBe, which 
sells AJAX solutions for SOA. 



LETTERS TO THE EDITOR 

Bad Job on Mono 



Your article "Enterprises Don't Catch 
Mono" [Oct. 1, page 1] is poorly 
researched. The writer, Alex Handy, 
quotes extensively from Matt Hargett, 
an acquaintance of his, and Matt takes 
some liberties that are way out of place 
regarding Mono. 

Matt became a user of Win- 
dows. Forms, a technology that is under 
development and not officially supported 
yet in Mono, and tried to use that for a 
commercial product. This is explicitly 
not supported at this point. 

Writing "unit tests" as Matt suggests 
for GUI applications is incredibly hard 
and can take 5 to 20 times more effort 
than writing tests for other components, 
just because of the nature of GUI applica- 
tions. There is no semantic way of testing 
that things "look" the same on the screen; 
there are too many independent factors. 

Would it be better if we wrote unit 
tests? Certainly, but there is a balance 
that we need to keep between shipping 
the software and writing unit tests. Matt 
does have a point, but it's undermined 
by the fact that he was using a technolo- 
gy that was explicitly labeled as under 
development. So complaining that 
regressions happen in alpha releases of 
software is unfair for the rest of Mono. 

Then he comments about ASP.NET; 
I think he just wanted to complement 
his answer, but again, he is wildly off the 
mark. He filed four bug reports, every 
single one of those bugs reports was 
fixed, and none of those was ever 
reopened, which defeats the whole pur- 
pose of his case. 

ASP.NET in Mono counts with 
113,000 lines of code in tests, 11,000 
individual tests for various components 



of it, and since it is a lot simpler to test 
for, we add test cases for the bugs that 
can be handled by nunit test cases. 

As your readers might know, unit test 
cases are necessary, but they do not cov- 
er the whole spectrum when it comes to 
quality assurance of software, and even 
when used in combination for code cov- 
erage, it is an incomplete solution. 
Could we do better? Yes. But the argu- 
ments made about Mono apply to every 
piece of software. 

So we have an article written that 
talks about regressions on a technology 
that is not released to the public, pitched 
as if this was the reason that Mono does 
not have any penetration in the market, 
and we get a quote from Matt talking 
about a subject that he has almost no 
exposure to (ASP.NET) that makes up 
for most of the padding. 

On the other hand, the same author 
writes about Ruby on Rails in the enter- 
prise, and in that setting, the angle is not 
how many tests Ruby on Rails has, or the 
regressions in Rails (Google for "ruby 
rails regression"). 

Miguel de Icaza 

Editors note: Miguel de Icaza is the 
founder of the Mono project. 

CORRECTION 

An incorrect link appeared in Andrew 
Binstock's Sept. 15 column "The Best of 
Free Books." The URL for Peter Kitson's 
book site is: www.computer-books.us. 

Letters to SD Times should include the writer's name, 
company affiliation and contact information. Letters 
become the property of BZ Media and may be edited. 
Send to feedback@bzmedia.com. 



Extending Legacy Systems: DATA WATCH 
The Path Most Chosen 
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Companies that are looking to adapt 
their legacy applications to service-ori- 
ented architectures are choosing to 
extend or surround their mainframe, 
midrange Unix and other midrange sys- 
tems with SOA-friendly technology, 
instead of replacing or upgrading the 
legacy applications. 

A survey published in September by 
Aberdeen Group found that more than 
half (58 percent) of the companies 
contacted are choosing the less 
drastic— and possibly more cost-effec- 
tive—option of extending or surrounding the existing applications with SOA features 
through software-based translation methods. A little more than a guarter of respondents 
(26 percent) are joining the SOA revolution by replacing legacy systems, while a mere 16 
percent believe they will accomplish their goals by modernizing the existing technology 
through the use of enterprise service buses and an SOA repository. 

The survey included responses from about 120 companies worldwide, from various 
industries and different enterprises, with applications running on mainframe, IBM AS/400 
and iSeries systems, or midrange Unix systems. 
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Sprocket Shenanigans 



My client sells widgets. Widgets, as 
you know, incorporate sprockets. 
Getting a good-quality sprocket is tradi- 
tionally quite difficult, but my clients 
claim to fame is their bulk contracts with 
sprocket manufacturers and the quality of 
the integration of those sprockets into 
widgets. Widget fulfillment is quite com- 
plex, and you're no doubt aware of the 
fortunes made by bulk widget-fulfillers. 

If it helps, the model might be some- 
what analogous to book publishing, where 
sprockets are authors, widgets are books, 
and widget-fulfillers are the Amazons and 
Barnes & Nobles of the world. Or you 
might map it into your own company 
if, like many SD Times readers, you are 
involved in supply-chain programming 
and yet your company does not conceive 
of itself as a software development firm. 

My clients business was founded on 
the profits to be had in bulk sprocket 
integration, not the few dollars to be 
reaped every time a widget is fulfilled. 
Programming engines to drive these wid- 
get-fulfillment systems is one of those 
small-but-profitable niches that are the 
savior of the independent programmer. 

My client had made the very reason- 
able decision to outsource that function 
to just such an independent. Everything 
seemed fine for a few years: The system 



worked, the people got their widgets, my 
client closed more socket-integration 
deals, the independent programmer 
skimmed the small per-transaction profit 
off the top... well, "skim" might be too 
harsh a word (although I've heard a lot 
worse from my client's characterization of 
this fellow). The distribution of per-trans- 
action profits was, at least, 
ambiguous in the original con- 
tract, and although I've never 
heard of a programmer getting 
a piece of the action, "Why, of 
course what is now tens of 
thousands per month in profits 
is 100 percent mine" would 
probably be my starting point 
in negotiations, too. 

Where the programmer 
went over the line was in 
threatening to completely turn off the sys- 
tem. There's hardball and there's plain 
foolishness: As soon as the programmer 
reiterated this threat, my client knew that 
they had to sever their relationship with 
this guy as soon as possible. That's when 
they called me: Was it possible to build a 
replacement widget-fulfillment engine in 
a matter of a few months? "Money's no 
object," they said. No, they didn't say that. 
Of course they didn't. No one ever says 
that. What they said was: "We're not going 




to pinch pennies resolving this." That is as 
close to an offer of a blank check as I ever 
expect to hear. 

I regretfully told them that I didn't 
have a widget-fulfillment engine to sell. 
"Oh, we didn't expect that," they said, 
"but can you help us with our widget- 
fulfillment development infrastruc- 
ture?" They had awakened to 
the fact that they were a soft- 
ware development company 
whether they wanted to be or 
not. Theirs was a blank slate, 
though. They had nothing in 
terms of source code: Even 
their Web pages were on the 
server controlled by the re- 
calcitrant programmer. So, in 
the time I worked with them, 
I had a rare chance to see a 
true blank slate. 

The filling of that slate was dominated 
by the nightmare of hiring programmers. 
You know the list of outrages in resumes: 
words capitalized with abandon, neolo- 
gisms (my favorite being the person who 
boasted of his "interpersonnel" skills), and 
an utter lack of expository skills. I don't 
know which made me angrier, the sample 
source code that wasn't formatted or the 
source code that was just plain stolen. 
"Kids today!" is an evergreen topic 



for columnists, of course, but I was addi- 
tionally struck by the lack of response 
from older programmers. Ageism has 
always been a problem in programming, 
but it appears to me that in the past half- 
decade the low salary requirements of 
offshore developers (US$15 an hour for 
Web developers is the number that I 
saw) and young graduates has cleared 
the field of middle-aged journeyman 
developers dramatically. I have a feeling 
that most middle-aged programmers are 
either settled in their niche or have 
moved on to another career. 

Somewhat compensating for that was 
tool quality. Selecting tools is like selecting 
furniture: It's almost always a question 
"What fits?" and not "What's optimal?" It's 
even rarer to work with a company with 
no bias toward any tool or even platform. 
We chose several open-source compo- 
nents because they were easy to set up 
and administer while providing "good 
enough" functionality. On the other hand, 
we chose the solution that we wanted 
because, for once, integration with legacy 
systems was not an issue. 

My only regret was that I wasn't in 
the meeting when the programmer, reit- 
erating his threat to turn off his servers, 
was told: "Feel free. We stopped using 
your system at the top of the hour." I 

Larry O'Brien is a technology consul- 
tant, analyst and writer Read his hlog at 
www. knowing, net. 
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The Real Value of Virtualization 



Ask most developers what virtualiza- 
tion does for them, and they'll tell 
you it enables them to test software on 
multiple operating systems. Ask most IT 
managers, and they'll say it provides serv- 
er consolidation. Testing and server con- 
solidation are the two drivers that have 
kept virtualization alive during the past 
few years. By limiting its potential to these 
two niches, however, sites end up over- 
looking the real value of virtualization. 

I believe virtualization is about to 
break out in the enterprise. Two reasons 
are the closing of the performance gap, 
due in part to processor innovations by 
Intel and AMD, and the increased dis- 
covery of the value of virtualization in 
some fascinating niches. In this column, 
I discuss the niches that are closely relat- 
ed to software development. My next 
column will focus on IT areas in which 
virtualization can bring benefits indi- 
rectly related to software development. 

When most developers think of virtu- 
alization and testing, they think of setups 
akin to running VMware Workstation on 
their development system. They can cre- 
ate and load system images for Linux, 
Solaris x86 and Windows and then test the 
software on these platforms. This use case 
can be easily expanded. Products such as 
Surgient VQMS and VMware (formerly 



Integration Watch 



Akimbi) Slingshot enable testing of multi- 
system configurations. I discussed these 
products in my June 15 column ("The 
Rise of Virtual Labs," page 33). They per- 
mit QA engineers to save all the state of all 
machines in a configuration with a single 
mouse click. The resulting snapshot is 
then stored in a library. If this 
is done when a bug occurs, the 
original developer can then 
check out this snapshot and 
see the bug along with all the 
data on how the system was 
set up and the software config- 
ured. The snapshot can even 
be replayed while the original 
configuration is still running 
(due to a built-in virtual router 
that performs NAT on the IP 
addresses and converts the MAC address- 
es so they don't collide). 

Virtualization is particularly useful for 
measuring software performance under 
varying scenarios. For example, it's very 
simple to augment or decrease the 
amount of RAM on a given VM, by sim- 
ply editing the VM's config file. Prior to 
virtualization, testing multiple RAM sce- 
narios was truly onerous. (I believe this 
aspect is one reason ISVs tend to greatly 
overstate the amount of RAM their soft- 
ware needs. It saves them from having to 




test on lesser systems, as the inflated min- 
imum pushes the onus for underperfor- 
mance on to the customer. This tendency 
toward excessive recommendations 
results in a pleasant discovery: Sites can 
consolidate more software on one server 
than they projected. This is because they 
can dial down the RAM on the 
individual VMs below the "rec- 
ommended" but inflated mini- 
mums and still get good per- 
formance.) 

Moreover, virtualization 
enables testers to ratchet net- 
work speed up and down, as 
well as change the number of 
virtual processors. This last 
point has some unfortunate 
constraints. No hypervisor to- 
day that I'm aware of exposes processor 
cores or hyper-threading pipelines as sep- 
arate virtual processors. Rather, they map 
each socketed CPU to virtual processors. 
On a dual-core workstation, or a four- or 
eight-way server, this enables you to test 
the software using various CPU configu- 
rations and see how performance is affect- 
ed. While such tests provide useful data 
that would be a real pain to obtain other- 
wise, they don't reflect multicore systems. 
I expect all major hypervisors will eventu- 
ally map individual cores to individual vir- 



tual CPUs. (However, hyper- threading 
pipelines, I suspect, will never be elevated 
to this level.) When the cores are exposed, 
virtual systems will be a wonderfully con- 
venient way to test performance under 
numerous hardware scenarios. 

Virtualization can also protect IP 
when offshoring. In this scenario, devel- 
opers log into a hosted virtual machine 
running on the customer's systems. By 
careful restrictions on the VM's network 
access, this approach makes it difficult to 
copy or steal IP. All file I/O is kept on the 
VM. Developers code and save to the 
local VM and have no way to do I/O that 
is local to them. So, they cannot copy files 
(barring the use of a screen scraper). This 
setup is not ironclad, of course, but it 
helps enforce greater control over IP. The 
benefit of virtualization in this case is that 
the VM can be configured to block I/O to 
any place other than its own image. In 
addition, the customer can configure the 
VMs with the exact tools it wants the con- 
tract developers to use, and it can set up 
automated background processes (such 
as code check mechanisms, build pro- 
cesses and even metrics gathering). 

Virtualization is on the verge of proving 
its value in many new areas that benefit 
development. Next time, I'll discuss some 
more thought-provoking applications. I 

Andrew Binstock is the principal analyst 
at Pacific Data Works. Read his hlog at 
binstock. hlogspot. com. 
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A Big Disconnect 



Industry Watch 






There seems to be a recurring theme 
here. Last month, I wrote in this 
space about continuous builds and 
tests, and wondered if many of you 
folks had adopted the development 
practices that would best leverage these 
technologies. 

This time, it's requirement manage- 
ment systems. Again, like continuous 
test and builds, the ability to 
elicit complete information 
from the customer and vali- 
date the requirement before 
even a line of code is written 
seems like a no-brainer to me. 
Too many times, we hear sto- 
ries of developers who wrote 
an elegant program and found 
from functional testing that it 
works beautifully, but when 
the software is deployed, busi- 
nesses find out a critical piece is missin 
hurting their bottom line. 

I bring this up because of the results 
of a survey that was sponsored by 
Borland, which sells a requirements 
definition and management system. 
However, the company said the survey 
was done "blind," meaning respon- 
dents did not know Borland was 
behind the study. 

The study found 84 percent of 
respondents thought it is important or 
critical to get software requirements 
right, yet only 30 percent use require- 
ments management systems sold by soft- 
ware companies. Most respondents 
use Word documents, spreadsheets and 
e-mail to communicate application 
requirements, according to the study. 

Further, only 25 percent of the 
respondents said that adopting technol- 
ogy to automate requirements processes 
was under way in their organizations, 




while 62 percent said process automa- 
tion was "under review." 

So, people seem to realize the 
importance of getting requirements 
right, and of being able to track them 
throughout application development 
and revision. Yet only one-quarter of 
them even had requirements technolo- 
gy adoption under way. 

Why the disconnect? 
Dave Hauck, the director 
of product marketing at Bor- 
land, said there's a differ- 
ence between what people 
think they're doing, and 
what they're really doing. 
"When we drilled down on 
tools and practices, the data 
turns out that they're not 
managing their require- 
ments. They're not following 
;ood practices. Or, they have good 
practices, but they're not automated 
and can't be carried out by teams doing 
day-to-day development." 

Sometimes, Hauck said, the require- 
ments are not prescriptive enough. 
There needs to be a way for the devel- 
oper to have a discussion with the stake- 
holder. This is one of the key premises 
behind agile development processes. 

However, one important question 
seems to have been missed by the folks 
who wrote the survey. What percentage 
of respondents believe they are getting 
their requirements right? 

People might very well be doing an 
effective job using Word, and sticky-pad 
notes and e-mail. Perhaps they're not 
seeing the need for expensive require- 
ments tools in and of themselves — they 
certainly seem to have more uptake 
when introduced as part of a life-cycle 
management solution. 



"When you look at the triage of suc- 
cess," Hauck said, "it's people, process 
and tools." 

Apparently, in that order. 

AN 'A' FOR EFFORT 

It's been more than two years since a task 
force named "Improving Security Across 
the Software Development Lifecycle" 
issued a 123-page report recommending 
steps to, well, improve security across the 
software development life cycle. 

The effort was undertaken at the 
behest of the U.S. Department of Home- 
land Security's National Cyber Security 
Division. Yet the government has not yet 
formally responded to the report. 

Among the recommendations are to 
include security as a core component of 
university computer education pro- 
grams, publish content on the Internet 
pertaining to secure software develop- 
ment, and determine the effectiveness 
of practices in reducing software vul- 
nerabilities. Also, the task force called 
for reward and incentive programs for 
developers based on the security of 
their code, and for information leading 
to the conviction of cybercriminals. 

None of these is controversial; none 
requires enormous outlays of money. Yet 
since 2004, the U.S. government has not 
been able to give its approval to the 
report. 

However, private-sector organiza- 
tions have begun to realize the impor- 
tance of adopting coding practices that 
can help reduce their vulnerability to 
cyberattack. It's heartening to see busi- 
nesses taking the proactive approach on 
security, not waiting until it's mandated 
or regulated by the government, but 
realizing on their own that developers 
are a key cog in the fight for application 
security. I 



David Rubinstein 
SD Times. 



editor-in-chief of 
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Oracle has announced it will acquire data integration software 
provider Sunopsis; financial terms of the deal were not revealed. 
With the move, Oracle plans to enhance its Fusion middleware by 
supporting a broader range of data sources and targets. Sunopsis, 
based in Burlington, Mass., sells the Sunopsis Data Conductor, 
which takes a rules-based approach to data transformation and 
integration, and the Sunopsis Active Integration Platform, built 
around a persistent data and event database for unifying integra- 
tion events . . . Rich Internet application software provider 
Nexaweb Technologies has secured US$10 million in venture cap- 
ital funding, led by Egan-Managed Capital, Masthead Venture 
Partners and Velocity Partners. The company last month also 
named Christian Heidelberger to the position of chief executive 
officer. Heidelberger had been CEO and president of ChannelWave 
Software until its 2005 sale . . . Serena Software was expected in 
late October to close on its acguisition of project and portfolio 
management (PPM) software seller Pacific Edge Software. Sere- 
na plans to use the assets from the acguisition to build out prod- 
ucts that give customers control over the time, cost and impact of 
change in an IT organization. "We've long understood the integral 



role that PPM plays in helping IT organizations meet the demands 
on a business, and after extensive research are confident we are 
choosing the best solution in the marketplace to meet that need," 
said Mark Woodward, president and CEO of Serena. Pacific Edge 
Mariner, that company's flagship product that began shipping in 
October 2005, combines portfolio, project, resource, demand and 
financial management into an integrated decision-support frame- 
work for an organization's PPM initiative. 

EARNINGS: Business integration software company TIBCO 
Software saw revenues increase but income decline in its third fis- 
cal quarter of 2006. The company announced revenue of 
US$120.4 million and net income of $11.2 million for the quarter, 
compared with total revenue of $105.9 million and net income of 
$13.8 million for the same period last year. "Our business grew at 
a healthy rate in the quarter, and we are seeing increased momen- 
tum across our business," said Vivek Ranadive, chairman and CEO 
of TIBCO, in a statement. "As we look ahead to Q4 and fiscal 2007, 
we will focus on expanding our customer base and deepening our 
presence and expertise in specific vertical markets." I 



events Calendar 



ASP.NET Connections 

Las Vegas 
DEVCONNECTIONS 

www.devconnections.com 



Nov. 6-9 



Software Test Nov. 7-9 

& Performance Conference 

Boston 
BZ MEDIA 

www.stpcon.com 



Web 2.0 Conference 

San Francisco 
O'REILLY MEDIA 

www.web2con.com 



Nov. 7-9 



Six Sigma in Software & IT Nov. 7-9 

San Francisco 
WCB 

www.wcbf.com/quality/5068 



SuperComputing 2006 

Tampa, Fla. 

IEEE COMPUTER SOCIETY 

sc06.supercomputing.org 



Nov. 11-17 



VSLive Nov. 14-17 

Dallas 

FAWCETTE TECHNICAL PUBLICATIONS 

www.ftponline.com/conferences/vslive/2006/dallas 

Application Integration Dec. 4-6 
and Web Services Summit 

Orlando, Fla. 
GARTNER 

www.gartner.com/2_events/conferences/apn17.jsp 



XML 2006 

Boston 
IDEALLIANCE 

2006.xmlconference.org 



Dec. 5-7 



Enterprise Dec. 6-8 

Architecture Summit 

Orlando, Fla. 
GARTNER 

www.gartner.com/2_events/conferences/ea5.jsp 

Web Design World Dec. 11-13 

Boston 

FAWCETTE TECHNICAL PUBLICATIONS 

www.ftponline.com/conferences 



Macworld Conference 
SExpo 

San Francisco 
IDG WORLD EXPO 

www.macworldexpo.com/live/20 



Jan. 8-12 



RSA Conference 

San Francisco 
RSA SECURITY 

www.rsaconference.com/2007/US 



Feb. 5-9 



SCALE 5x Feb. 10-11 

(Southern California Linux Expo) 

Los Angeles 

S0CAL LINUX USER GROUPS 

www.socallinuxexpo.org/scale5x 



SHARE User Events 

Tampa, Fla. 
SHARE 

www.share.org 



Feb. 11-16 



4th Software 
Security Summit 

San Mateo, Calif. 
BZ MEDIA 

www.S-3con.com 



April 16-17 



For a more complete calendar of U.S. software 
development events, see www.bzmedia.com/calendar. 
Information is subject to change. Send news about 
upcoming events to events@bzmedia.com. 
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Allova' XML Suite 2007 - The world's leading XML development tools. 
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'Special offer: Now until Dae. 24. 2006. 
purchase or upgrade to the Attova XML Suite 
and get ine NEW Altovs DeildbaseSpy 

database- query and design tool (or FREE! 
CondftwriE appy aw Wed site for-dKBilB. 



Ship Software OnTime" 








ONTIME20Q6 

The Fast & Scalable Team Solution for... 

Defect & Issue Tracking • Feature & Change Tracking • Task & To-do List Tracking • Helpdesk Ticket Tracking 

OnTime is the market-leading project, defect and feature management tool for agile software development and test teams. 
OnTime facilitates tracking, analyzing and trending team-based software development efforts in an intuitive and powerful user 
interface. A fully customizable Ul, powerful workflow, process enforcements, two-way email communications and custom reports 
combine to help software development teams ship software on-time! 

Available for Windows, Web & VS.NET 2003/2005 



OnTime 2006 Professional Edition 



OnTime 2006 Small Team Edition 




• For Teams of 1 to 1 ,000 Members 

• From $149 Per User 




• For Teams up to 1 Members 

• Free Single-User Installations 

• $495 for 5-Team Members 

• $995 for 10-Team Members 



8006530024 





asp.netPRO 



software for software development' 

www.axosoft.com 



Best Project Management/ 

Defect Tracking 

OnTime 2006 Software 

Project Management System 

Axosoft 




Only $495 for up to 5 Users • Only $995 for up to 10 Users 

Free Single-User Installations 



